2023

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unau

In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of bina

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. A

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue

A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code

A vulnerability, which was classified as problematic, was found in Cute Http File Server 2.0. This affects an unknown pa

A vulnerability, which was classified as problematic, has been found in PHP Jabbers Rental Property Booking 2.0. Affecte

A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by this vulnerability is a

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions start

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injection

User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary c

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code e

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials all

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are use

A broken access control was found allowing for privileged escalation of the operator account to gain administrator priv

A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown fu

A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue a

Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a

Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier.

A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerabi

A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affec

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions startin

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a re

Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issu

A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext.

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary com

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open th

A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files v

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices,

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.

An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrar

File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file

Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in the