2023

Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corr

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to t

Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or ma

Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or

Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or m

Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manip

Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or m

An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certa

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1,

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1,

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the serv

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0

Speckle Server provides server, frontend, 3D viewer, and other JavaScript utilities for the Speckle 3D data platform. A

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backu

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the s

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the

An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andreas Münch Mult

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Labs64 Credit Trac

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simple Calendar Si

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious act

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpexpertsio Rocket

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CurrencyRate.Today

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CurrencyRate.Today

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnigmaWeb WP Catal

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nima Saberi Aparat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raghu Goriya MyTub

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBloc

Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could p

Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/getting

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. 

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.