2023

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attack

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be pe

Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely ava

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum featu

Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special f

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file wit

Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial

Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An un

Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerabi

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated rem

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerab

TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registr

ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. A

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail de

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a

Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are r

A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 thro

The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type val

The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the '

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter withi

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated r

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users ar

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific a

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauth

ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attack

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated r

Home Assistant is open source home automation software. Prior to version 2023.12.3, the login page discloses all active

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka

lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of i

A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v. 11.0 through 11.0.2, v12

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v. 13.0 through

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP G

Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap cor

Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engag

Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap

Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap

Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap c