2023

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page paramet

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect par

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect par

Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by th

ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions.

A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerab

A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown

A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affect

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

A vulnerability, which was classified as critical, was found in Calendar Event Management System 2.3.0. This affects an

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some un

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of t

A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is s

A vulnerability was found in fanzila WebFinance 0.5. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function

Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any us

A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of serv

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. When authenticating us

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenD

OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a dec

OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the a

A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processi

A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown

WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and ass

WEPA Print Away is vulnerable to a stored XSS. It does not properly sanitize uploaded filenames, allowing an attacker to

A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part o

Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted au

Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run

Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user nam

Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrar

Cross Site Scripting (XSS) vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote a

Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to r

Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows

Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote

Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary

Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attack

Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows re

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping functio

Cross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfg_copyrigh

Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run ar

Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js f

Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA