2023

A vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5. It has been declared as critical. Affected by this vulnerabil

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unkn

A vulnerability was found in Media Browser Emby Server 4.7.13.0 and classified as problematic. This issue affects some u

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the f

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file gene

Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apa

An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in

ShuiZe_0x727 v1.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /iniFile/co

A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to wr

An issue was discovered in Stormshield SSL VPN Client before 3.2.0. A logged-in user, able to only launch the VPNSSL Cli

File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php.

LinuxASMCallGraph is software for drawing the call graph of the programming code. Linux ASMCallGraph before commit 20dba

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain rea

social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a use

PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php.

Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8

matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it was possible to craft an event such

Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repo

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows

MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasource. Prior to version 23.7.4.0,

Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. Accor

protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section 7.1 defined the format of ch

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possib

CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command i

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitiv

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication,

Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication pro

Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its commu

Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communicati

Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling at

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to sp

Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the

Connected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's firmware used for devi

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authen

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel.

matrix-appservice-bridge provides an API for setting up bridges. Starting in version 4.0.0 and prior to versions 8.1.2 a

matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it is possible to craft a command with

Logistics Pipes is a modification (a.k.a. mod) for the computer game Minecraft Java Edition. The mod used Java's `Object

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication

OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to ex

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send email

Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Ru

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud ver