2023

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially craf

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious act

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A

A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerabil

A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown par

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to chan

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to exec

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue i

A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the c

A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown pro

A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects

A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1. It has been classified as problematic. This affe

A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some un

A vulnerability has been found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this vulnerabili

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative

Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML e

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is op

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.

A vulnerability, which was classified as critical, was found in Nesote Inout Blockchain EasyPayments 1.0. Affected is an

A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability af

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affe

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affect

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affecte

PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters. This affects 0.6.26.

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26.

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol

WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade_filter.a

WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp.

rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related i

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a u

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar secti

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to b

Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in

zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing _callable strings_ (ie

Knowage is an open source suite for business analytics. The application often use user supplied data to create HQL queri

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption ro

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escapi

An out-of-bounds write vulnerability in Bitdefender Engines on Windows causes the engine to crash. This issue affects Bi

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in t

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault Manageme

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to c

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain se

Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a

Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability