2023

A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view P

A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected i

REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomiz

An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversa

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repa

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view C

A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via a

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. This vulnerability aff

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. This affects an u

NodeBB is Node.js based forum software. Starting in version 2.5.0 and prior to version 2.8.7, due to the use of the obje

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access s

A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML

A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary w

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentic

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user ge

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulti

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This i

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to mem

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue m

A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of servic

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. Th

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling o

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within

Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of priv

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes a

A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allo

/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with a

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can cha

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuratio

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly

The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its set