2023

An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers

An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Att

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This v

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects a

Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS).

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by t

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as criti

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified

A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management Syst

A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue

A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability aff

A vulnerability classified as critical has been found in Campcodes Online Thesis Archiving System 1.0. This affects an u

Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions.

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= 1.5.5 versi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gus Sevilla WP Clictracker plugin <= 1.0.5 versions.

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by th

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by

Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized u

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username p

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to th

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The write logic of Exception Effective

An issue was discovered in the ALU unit of the OpenRISC mor1kx processor. The carry flag is not being updated correctly

An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The o

An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The o

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term p

The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_

Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2.

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in e

@web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user c

OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may

Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later t

Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to l

slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header

A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Serie

An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Juno

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Ju

An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an una

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows

An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthentica

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper N

An Unexpected Status Code or Return Value vulnerability in the kernel of Juniper Networks Junos OS allows an unauthentic

An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allow