2023

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problemat

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vuln

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unkn

A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issu

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problema

A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. Th

A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unkn

sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an inform

A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipu

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Pr

IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obf

SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the

An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbit

The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2

The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to

Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitra

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary site

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown edito

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the oper

Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operati

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read fun

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM

IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds chec

IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bound

IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission spe

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remo

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application

An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue

`nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options direct

`nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed

OpenZeppelin Contracts is a library for smart contract development. A merge issue when porting the 5.0.1 patch to the 4.

HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of

Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could dead

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated C

Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collab

dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments ru

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensi

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execu

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensit

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensit

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensi

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensi

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensit

An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and d

A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in th

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affecte