2023

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger.

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL07552646

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the time

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerab

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/ru

libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-t

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.

An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail messa

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

kvmtool through 39181fc allows an out-of-bounds write, related to virtio/balloon.c and virtio/pci.c. This allows a guest

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Atta

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x befor

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bou

The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of

LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scop

A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPre

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI l

An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks t

An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on com

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on com

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are n

XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't prop

XWiki Commons are technical libraries common to several other top level XWiki projects. There was no check in the author

XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systemat

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the exi

XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users

XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTM

A vulnerability, which was classified as critical, was found in IBOS 4.5.5. Affected is an unknown function of the file

Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20.

Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affec

A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulner

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20.

A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This a

A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been rated as problematic. Aff

A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Aff