2023

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/java

TGstation is a toolset to manage production BYOND servers. In affected versions if a Windows user was registered in tgst

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) b

snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 vi

Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are genera

Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malici

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malici

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can

The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when ru

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minu

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentia

gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snow

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying t

Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another stu

Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the /feedback/co

An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain i

Incorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given course to download docum

Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends.

A vulnerability was found in SourceCodester Life Insurance Management System 1.0. It has been declared as problematic. A

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /gofo

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/Set

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/Pow

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/Set

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/sav

A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the functio

Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attacke

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_m

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, a

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 could allow a remote attacker to hijack the clicking action

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerabi

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to cross-site scripting. This vulnerability al

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to

Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path f

Gatsby is a free and open source framework based on React. The Gatsby framework prior to versions 4.25.7 and 5.9.1 conta

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit se

PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-sit

The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within we

Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.jso

The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vufo