2023

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c

A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/g

A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code o

A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the fi

A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result

A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown

Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validat

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible

The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged

A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions start

Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and

github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Ser

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting

A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.

A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vu

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an u

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which ca

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authen

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

A vulnerability was found in nickzren alsdb. It has been rated as critical. This issue affects some unknown processing.

A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown

A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects t

A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of th

A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing

Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a networ

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a

Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prio

m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenti

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.

Cross-Site Request Forgery (CSRF) in MiKa's OSM – OpenStreetMap plugin <= 6.0.1 versions.

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbo

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC

Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi T

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulne

A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of

A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.pos

A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of t

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknow

The RSSImport WordPress plugin through 4.6.1 does not validate and escape one of its shortcode attributes, which could a

The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, whic

The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could a

The Real Testimonials WordPress plugin before 2.6.0 does not validate and escape some of its shortcode attributes before

The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attri

The Seriously Simple Podcasting WordPress plugin before 2.19.1 does not validate and escape some of its shortcode attrib