2023

In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, th

In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a

The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful

The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerabi

Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confiden

The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of t

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerabili

Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause o

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability ma

mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_u

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.

skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JS

Cross-Site Request Forgery (CSRF) vulnerability in Made with Fuel Better Notifications for WP plugin <= 1.9.2 versions.

Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats para

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ArtistScope CopySafe Web Protection plugin <= 3.13 version

Cross-Site Request Forgery (CSRF) vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin <= 1.3 version

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1

Cross-Site Request Forgery (CSRF) vulnerability in BoLiQuan WP Clean Up plugin <= 1.2.3 versions.

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagV

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. A malicious user on a S

Cross-Site Request Forgery (CSRF) vulnerability in Anton Skorobogatov Rus-To-Lat plugin <= 0.3 versions.

Cross-Site Request Forgery (CSRF) vulnerability in utahta WP Social Bookmarking Light plugin <= 2.0.7 versions.

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malici

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation A

Cross-Site Request Forgery (CSRF) vulnerability in 984.Ru For the visually impaired plugin <= 0.58 versions.

Cross-Site Request Forgery (CSRF) vulnerability in yonifre Maspik – Spam Blacklist plugin <= 0.7.8 versions.

Cross-Site Request Forgery (CSRF) vulnerability in conlabzgmbh WP Google Tag Manager plugin <= 1.1 versions.

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <

Cross-Site Request Forgery (CSRF) vulnerability in FixBD Educare plugin <= 1.4.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin 

Cross-Site Request Forgery (CSRF) vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin <= 7.1.4 versio

Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash plugin <= 3.6.4.1 versions.

Directory traversal vulnerability in ESS REC Agent Server Edition series allows an authenticated attacker to view or alt

user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. I

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a quer

A vulnerability classified as problematic has been found in NFine Rapid Development Platform 20230511. This affects an u

c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to g

c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 ad

c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RAND

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been rated as problematic. Affected by th

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been declared as problematic. Affected by

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrge

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been classified as problematic. Affected

In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be execut