2023

A vulnerability was found in Hospital Management System 1.0. It has been rated as critical. This issue affects some unkn

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherl

A vulnerability was found in Hospital Management System 1.0. It has been declared as critical. This vulnerability affect

A vulnerability was found in Hospital Management System 1.0. It has been classified as critical. This affects an unknown

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attack

There is a Cross‑Site Scripting (XSS) vulnerability in Esri ArcGIS Enterprise Sites versions 10.9 and below that may all

There is a Cross-site Scripting vulnerability in Esri Portal for ArcGIS Sites in versions 10.9 and below that may allow

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.

A vulnerability was found in Hospital Management System 1.0 and classified as critical. Affected by this issue is some u

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in SourceCodester House Rental and Property Listing System

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management Sy

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets

A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. T

A vulnerability classified as problematic has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2

Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthentica

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker

A vulnerability was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. It has been rated as proble

A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. Affected by this vulnerability is the func

There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS Sites versions 11.1 and below that

A vulnerability was found in EasyAdmin8 2.0.2.2. It has been classified as problematic. Affected is an unknown function

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as criti

A vulnerability, which was classified as critical, was found in Gen Technology Four Mountain Torrent Disaster Prevention

eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/re

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this is

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected b

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Af

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing

A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Admi

Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access

ShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation of the lock opening mech

SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via th

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Adv

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying

A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown p

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, with

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers t

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI) vulnerability via the componen

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit

Millhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability via the component /add_po

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=sho

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. Affected by this issue is the function actionExpo

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private"

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omn

IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter.

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writa

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed au