2023

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability

A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read i

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read i

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read i

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path t

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path t

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform comman

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform comman

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (A

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.

An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link

LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).

Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vu

In affected versions of Octopus Deploy it is possible to discover network details via error message

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is r

A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux K

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw all

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:late

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.

The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive fi

PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerabilit

A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical.

A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacke

Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_lis

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affe

A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Af

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue a