2023

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are

Microsoft Office Remote Code Execution Vulnerability

A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.

Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumer

Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS)

SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special charac

A vulnerability, which was classified as problematic, has been found in WooSidebars Plugin up to 1.4.1 on WordPress. Aff

A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress. Affected by

emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain

MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three

The Get your number WordPress plugin through 1.1.3 does not sanitise and escape some of its settings, which could allow

The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes

The Quiz Maker WordPress plugin before 6.4.2.7 does not escape some parameters before outputting them back in attributes

The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting i

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise

The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, lead

The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using

The Hostel WordPress plugin before 1.1.5.2 does not sanitise and escape some of its settings, which could allow high pri

The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes be

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could

Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonat

Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue af

Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function

A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress. Affec

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerabilit

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue a

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vuln

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!D

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, Identity

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2C

Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate valida

DokuWiki before 2023-04-04a allows XSS via RSS titles.

OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a UR

IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL

IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that could

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration

A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic.

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checki

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method