2023

NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Phan Chuong IP Metaboxes plugin <= 2.1.1.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Phan Chuong IP Metaboxes plugin <= 2.1.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ludwig Media UTM Tracker plugin <= 1.3.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snipp

A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management

EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS).

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to

LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an exe

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plug

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GalleryPlugins Video Contest plugin <= 3.2 versions.

A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affe

All versions of the package progressbar.js are vulnerable to Prototype Pollution via the function extend() in the file u

In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that disc

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web ap

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.

The Danfoss AK-EM100 stores login credentials in cleartext.

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the se

Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.

A vulnerability, which was classified as critical, has been found in PHPGurukul Teachers Record Management System 1.0. A

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service b

Pega Platform versions 7.2 to 8.8.1 are affected by an XSS issue.

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This

A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code vi

UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integ

An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent denial of service via the da

An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the datab

An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manip

An issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent denial of service by ma

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attack

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipu

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manip

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privileg