2023

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API al

Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a c

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some un

A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functi

Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an u

Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affect

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects som

A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affe

A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affe

A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected b

A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by

A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknow

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affect

A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerabil

A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affe

A vulnerability was found in GZ Scripts GZ Forum Script 1.8 and classified as problematic. Affected by this issue is som

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability o

Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive i

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about

Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote at

The Float menu WordPress plugin before 5.0.3 does not sanitise and escape some of its settings, which could allow high p

The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks,

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users suc

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks,

The URL Shortify WordPress plugin before 1.7.0 does not sanitise and escape some of its settings, which could allow high

The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in

The MStore API WordPress plugin before 3.9.8 does not sanitise and escape a parameter before using it in a SQL statement

The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of thei

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Pa

Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions.

KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation fe

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the admi

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in "/admin/index.php?pag

Cross-Site Request Forgery (CSRF) vulnerability in Albert Peschar WebwinkelKeur plugin <= 3.24 versions.

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scr

Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Potent Donations for WooCommerce plugin <= 1.1.9 versions.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In

Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device t

Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the F

Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-fo

Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive info

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic