2023

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting fr

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as problematic.

A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects s

A vulnerability classified as problematic was found in ZenTao PMS 18.8. Affected by this vulnerability is an unknown fun

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rat

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-serv

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-serv

Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers w

The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-admini

The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials u

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords

Mattermost fails to use  innerText / textContent when setting the channel name in the webapp during autocomplete, allowi

A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vul

A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the fi

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affec

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Af

google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request

A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by

Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to dele

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to imprope

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to mi

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` com

The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS In

The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to Directory Traversal in versions

The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application err

It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a m

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection

Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Point

Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name.

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and us

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values l

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an over

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signe

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset fo

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window struct

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls ne

Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial deni

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disc

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access

Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a deni

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a secu

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the log

Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user