2023

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may af

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may af

The window management module lacks permission verification.Successful exploitation of this vulnerability may affect conf

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft'

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as probl

A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by t

A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an

The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.

The Groundhogg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gh_form' shortcode in versions

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.

The Groundhogg plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missi

The Groundhogg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Groundhogg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

Zulip is an open-source team collaboration tool with unique topic-based threading. In the event that 1: `ZulipLDAPAuthBa

Zulip is an open-source team collaboration tool with unique topic-based threading. Zulip administrators can configure Zu

Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular no

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerabil

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an u

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x

IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to

IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. I

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSampl

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES

IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical e

Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override othe

DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian'

SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php.

Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/downl

jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is on

A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firm

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.04

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the

Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with l

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 ***

The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5.

Metabase is an open source business analytics engine. To edit SQL Snippets, Metabase should have required people to be i

Azure Arc Jumpstart Information Disclosure Vulnerability

A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior

netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could

A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an

A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a ma

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could ha

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used b