2023

An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_p

FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a r

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver

XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2

An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a

An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver

Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functi

Unauth. SQL Injection (SQLi) vulnerability in InspireUI MStore API plugin <= 3.9.7 versions.

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NTZApps CRM Memberships plugin <= 1.6 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike pl

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 

Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 al

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary comma

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary com

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensit

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Wind

A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affec

Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exp

Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exp

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit t

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Af

A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vu

A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator