2023

CLTPHP <=6.0 is vulnerable to Directory Traversal.

Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection.

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Pr

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced

An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor

In some situations, the Image module does not correctly check access to image files not stored in the standard public fi

Drupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated

Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to impro

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code exec

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary c

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtim

Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby uns

A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file

IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs ru

IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can

Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability

Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS).

Sourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS) via page=about.

SQL injection vulnerability found in PrestaShop askforaquote v.5.4.2 and before allow a remote attacker to gain privileg

blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability a

Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports

ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end_point.php query parameter in an output=htmltab action

ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php

Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set

VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing h

VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in th

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0,

Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable throu

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic.

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_cl

Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an un

Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a

The SolarWinds Platform was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allow

VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.

VMware Fusion contains a local privilege escalation vulnerability. A malicious actor with read/write access to the host

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in namithjawahar Wp-Insert plugin <= 2.5.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media Inline Tweet Sharer – Twitter Sharing Plu

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Reeves & David Stöckl TinyMCE Custom Styles plugin

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Carlos Moreira Interactive Geo Maps plugin <= 1.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discor

PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vul

PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the `ValidateCore::isClean

Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows