2023

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versio

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who ca

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with v

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with v

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A registered us

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with v

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The office docu

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with v

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who ca

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has vi

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wron

A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary comma

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expres

Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator ca

Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacke

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same pr

Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default inst

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Ciliu

A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request coul

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when ac

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` comman

Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed f

Discourse is an open source platform for community discussion. In affected versions a maliciously crafted request from a

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized

Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggl

Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotate

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vuln

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or de

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote cod

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote c

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE e

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install pa

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user t

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitra

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affecte

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a