2023

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the met

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. Thi

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-z

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some

A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerabili

A vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknow

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2.

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.

In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible

In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account

In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks

In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible

In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible

In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible

In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some c

In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible

In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible

In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible

In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Bu

In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

A stored Cross-site scripting (XSS) vulnerability in the FundRaiserEditor.php component of ChurchCRM v4.5.3 allows attac

A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web scr

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web sc

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagn

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpMode

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via par

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unkno

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this i

An issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a us

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory st

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Chat System 1.0. Affected by

A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this

Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability

The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_favorites' shortcode in ve

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticat

The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up t

The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on th

The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptograp

The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability che

The Blog-in-Blog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blog_in_blog' shortcode in v