2023

Feedbacksystem is a personalized feedback system for students using artificial intelligence. Passwords of users using LD

Discourse is an open source discussion platform. A CSP (Content Security Policy) nonce reuse vulnerability could allow X

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookk

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syn

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.

Alaris Systems Manager does not perform input validation during the Device Import Function.

A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.

A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.

The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read

mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a re

The configuration from the PCU can be modified without authentication using physical connection to the PCU.

Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zeman

The firmware update package for the wireless card is not properly signed and can be modified.

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts o

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts o

A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scr

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary w

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration f

A SQL injection vulnerability in the Boxtal (envoimoinscher) module for PrestaShop, after version 3.1.10, allows remote

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary w

Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the componen

A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitra

Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the chan

A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated

Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attac

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a he

Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VegaGroup Web Coll

An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel acce

An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channe

An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the cha

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive infor

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a

Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Hon

Server information leak of configuration data when an error is generated in response to a specially crafted message. See

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affect

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affect

Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. S

Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notifi

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a sp

Controller DoS due to stack overflow when decoding a message from the server.  See Honeywell Security Notification for

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific con

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. T