2023

IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel syn

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information vi

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store dat

A vulnerability has been found in SourceCodester Doctors Appointment System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in SourceCodester Doctors Appointment System 1.0. Affected

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This

A vulnerability classified as critical was found in SourceCodester Doctors Appointment System 1.0. This vulnerability af

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by t

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected b

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an u

A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. This issue affects some u

MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext.

A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This iss

A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown cod

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.ph

A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unkn

A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. A

A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as pr

The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved ema

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. A

Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upg

In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for register

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, pr

Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrol

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3

An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/m

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive info

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in ver

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in ver

A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note

IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user

A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functional

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.

A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0

A vulnerability was found in Twister Antivirus 8.17. It has been declared as critical. This vulnerability affects the fu

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log fi

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown

A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerab

A vulnerability, which was classified as problematic, has been found in MuYuCMS 2.2. This issue affects some unknown pro

A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerab

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This aff

Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a

Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plan