2023

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Command Injection in GitHub repository microweber/microweber prior to 1.3.3.

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate a

GLPI is a free asset and IT management software package. Starting in version 0.84 and prior to versions 9.5.13 and 10.0.

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutB

An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Rou

A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthentica

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, loc

Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, loc

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/ph

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for

A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially cr

A use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1.57600, processes protec

GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.

Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, loc

An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter a

A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands vi

The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4

The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4

The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to,

The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when c

The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4

The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4

The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when

Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to

A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPres

A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability af

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic.

Dell Streaming Data Platform prior to 1.4 contains Open Redirect vulnerability. A remote unauthenticated attacker can p

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPr

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Aff

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This i

A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affe

A vulnerability classified as problematic has been found in SourceCodester Online Payroll System 1.0. This affects an un

A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this i

A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been declared as critical. Affected by thi