2023

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to acc

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user

A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat. This can be e

A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature allow

A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking

A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can ca

An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid param

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing ove

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 a

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, th

 In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflo

 In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.

In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.

kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the Leas

Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16

IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a downl

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when proces

The MoveIt framework 1.1.11 for ROS allows cross-site scripting (XSS) via the API authentication function. NOTE: this is

A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability

Rockwell Automation ThinManager product allows the use of medium strength ciphers.  If the client requests an insecure

Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are ru

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potential

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potential

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scrip

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potential

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code v

The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/custome

Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in out

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characte

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multip

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This v

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Thi

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robert Macchi WP Links Page plugin <= 4.9.3 vers

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0

A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by

PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.

A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is a

Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem

Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allo

Unintentional change of settings during initial registration of system administrators which uses control protocols. The