2023

Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects un

A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0. This aff

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of React

cups-filters contains backends, filters, and other software required to get the cups printing service working on operati

A vulnerability was found in Sucms 1.0. It has been rated as problematic. Affected by this issue is some unknown functio

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of

A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nas

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.

TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by u

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allo

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to d

ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's securit

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privile

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users dat

SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wal

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this

The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to th

The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL I

In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source

Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (

Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (

Algoo Tracim before 4.4.2 allows XSS via HTML file upload.

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h

davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).

The MoroSystems EasyMind - Mind Maps plugin before 2.15.0 for Confluence allows persistent XSS when saving a Mind Map wi

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and in

Videostream macOS app 0.5.0 and 0.4.3 has a Race Condition. The Updater privileged script attempts to update Videostream

Incorrect access control in Videogo v6.8.1 allows attackers to access images from other devices via modification of the

Incorrect access control in Videogo v6.8.1 allows attackers to bind shared devices after the connection has been ended.

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of t

A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3

Prestashop posstaticblocks <= 1.0.0 is vulnerable to SQL Injection via posstaticblocks::getPosCurrentHook().

Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privilege