2023

The LinkedCustomFields plugin for MantisBT allows users to link values between two custom fields, creating linked drop-d

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the fi

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process wit

MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file wr

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component selec

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admi

A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or

The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an

The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could all

The WP Not Login Hide (WPNLH) WordPress plugin through 1.0 does not sanitise and escape some of its settings, which coul

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrat

The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow h

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the p

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the pa

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Di

MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side req

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.9

SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authe

A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an e

In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document typ

TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.

TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in m

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attack

An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder

This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" inpu

An oversight in BCB handling of reboot reason that allows for persistent code execution

U-Boot vulnerability resulting in persistent Code Execution 

U-Boot shell vulnerability resulting in Privilege escalation in a production device

Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application

A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. T

A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by

A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerabil

The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows att

A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affec

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. It has be

An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge bas

An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails

An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to exte

An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This

Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logic

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overfl

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by ex

JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey

An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow an

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown