2023

A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0.

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vul

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an

Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.

Concrete CMS (previously concrete5) before 9.1 is vulnerable to stored XSS in RSS Displayer via the href attribute becau

Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in upload

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files.

Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypa

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name.

The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing u

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue aff

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulner

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affe

Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection st

The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") t

The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accomp

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish

On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer Network" or "Client Serve

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this i

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by t

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infras

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xx

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xx

A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. This

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) be

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can

IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6

IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6

IBM Counter Fraud Management for Safer Payments 6.1.0.00, 6.2.0.00, 6.3.0.00 through 6.3.1.03, 6.4.0.00 through 6.4.2.02

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary ope

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary ope

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary ope

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary ope

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary ope

An issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credent

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges an

Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be dis

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/