2023

Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management sect

SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges

A vulnerability was found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this issue is some unknow

A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability i

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted scri

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /incl

A Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated user

Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows

A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected

A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issu

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affect

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an un

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName param

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName param

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname param

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the functio

A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unk

The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and inc

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can

Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hac

Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1.

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encodin

Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentia

PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send

There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a su

PiiGAB M-Bus stores passwords using a weak hash algorithm.

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cros

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbit

Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2,

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic auth

PiiGAB M-Bus transmits credentials in plaintext format.

VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagno

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor an

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versi

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external down

In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can

A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unk

Mastodon is a free, open-source social network server based on ActivityPub. When performing outgoing HTTP queries, Masto

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versi

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to version

authentik is an open-source Identity Provider. Prior to versions 2023.4.3 and 2023.5.5, authentik does not verify the so

A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unkno