2023

A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function action

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.

A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects

A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulne

A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is

"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary f

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attack

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a n

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which ma

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions

Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier

The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in version

The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to down

Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbit

The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is

File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privile

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.

A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733.

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected b

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected

The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creat

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who ca

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki i

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers t

py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to exe

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attacker

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. When switching f

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size aft

An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot.

An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.

ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).

Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and vi

A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have

ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS).

The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take ov

Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSa

A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Andr