2023

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected

InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstandin

Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occu

Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerab

PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-ho

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Thi

October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated back

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embe

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed te

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embe

IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper inp

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive informa

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed

Cross-site Scripting (XSS) - Reflected in GitHub repository viliusle/minipaint prior to 4.14.0.

The Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corpor

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 13.2 before 16.4.3, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting fr

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malic

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2,

Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter

Absolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101) in Systematica Radius

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents,

Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthen

Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, a

Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, an

The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions i

Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using t

Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitiv

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at le

Catalis (previously Icon Software) CMS360 allows a remote, unauthenticated attacker to view sensitive court documents by

Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salie

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmed Kaludi, Moha

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderVP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Vatsa Displa

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows

Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perf

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gVectors Team wpFo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred – Po

An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated

An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451

An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthe