2023

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial E

A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affect

A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SU

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows re

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-p

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an att

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could

syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesys

PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerabil

Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability.

A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test c

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phi

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve hos

The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior t

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert proc

An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an

IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege

In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege w

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of pr

In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure wit

In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects th

The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with

The Contextual Related Posts WordPress plugin before 3.3.1 does not validate and escape some of its block options before

The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before ou

The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before ou

The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortc

The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before outputting

The Drag & Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcod

The jQuery T(-) Countdown Widget WordPress plugin before 2.3.24 does not validate and escape some of its shortcode attri