2023

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /adm

SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to

Azure DevOps Server Spoofing Vulnerability

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial o

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the qdaemon command to

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piobe command t

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu comma

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an a

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticate

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before vers

A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cub

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scrip

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scrip

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. T

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windo

Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate priv

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows bef

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows bef

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber.

Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that

CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and pri

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a p

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote attacker to obtain

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user

Jellyfin is a system for managing and streaming media. Prior to version 10.8.13, the `/System/MediaEncoder/Path` endpoin

Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their

Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permiss

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected b

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affec

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! fo

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTR

The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contracts containing large arrays mi

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to di

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write adminis

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administr

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-

A vulnerability, which was classified as critical, was found in OTCMS 7.01. Affected is an unknown function of the file

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI i

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the sa

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0.

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical.

Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permis