2023

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent una

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticat

Dell ECS Streamer, versions prior to 2.0.7.1, contain an insertion of sensitive information in log files vulnerability.

An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which t

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated a

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due t

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vu

A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. Th

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded e

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to

A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown p

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDe

copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via

Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when request

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/.

TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on e

TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior to versions 9.5.42

Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spr

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verify

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain

Cryptomator is data encryption software for users who store their files in the cloud. Prior to version 1.9.2, the MSI in

Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM). Prior to version 0.3.10, the e

A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unk

Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the com

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unifie

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulne

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset hav

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation f

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Ex

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The Ba

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "resto

RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning.

Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS). The impact is: execu

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/c

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym(

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-la

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2,

Contao is an open source content management system. Starting in version 4.0.0 and prior to versions 4.9.42, 4.13.28, and

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes i

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,

Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version