2023

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vul

A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some u

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. Thi

Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from eleva

Mattermost Sever fails to redact the DB username and password before emitting an application log during server initializ

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This is

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. Thi

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. T

An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Softwa

An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache

Attacker can access arbitrary recording/room Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeet

A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected b

A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic. Af

IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to. IBM X-For

IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16.

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code.

kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenti

Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls wit

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number pa

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone para

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list paramete

Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the co

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing