2023

Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fie

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a ma

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a ma

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache

In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible

In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers

In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute c

Strapi is an open-source headless content management system. Prior to version 4.10.8, anyone (Strapi developers, users,

An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authenti

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon p

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 9.0.2 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpxpo PostX – Gutenberg Post Grid Blocks plugin <= 2.9.9 v

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 version

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated att

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widg

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Steven Henty Drop Shadow Boxes plugin <= 1.7.10 version

NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Ex

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows a

A vulnerability classified as problematic has been found in Campcodes Beauty Salon Management System 1.0. This affects a

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as problematic. Affect

Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache In

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based bu

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicatin

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This issue affe

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulne

A vulnerability, which was classified as problematic, was found in Campcodes Beauty Salon Management System 1.0. This af

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web reque

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affec

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an un

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as critical. This issue aff

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a spec

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulner

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as critical. This affe

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this i