2023

A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been classified as critical. Affected is a

A vulnerability was found in SourceCodester Online Payroll System 1.0 and classified as critical. This issue affects som

A vulnerability has been found in SourceCodester Online Payroll System 1.0 and classified as critical. This vulnerabilit

A vulnerability, which was classified as critical, was found in SourceCodester Online Payroll System 1.0. This affects a

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrol

In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via

ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible becau

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is p

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. Thi

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possi

SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs

Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for aut

Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container R

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Ru

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Ru

Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass naviga

Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain

Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentiall

Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out

Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap c

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potenti

Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote att

Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a u

Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform

Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engag

Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised th

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possi

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3,

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3,

The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settin

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3,

Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should r

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3,

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and key

Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payl

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associate

The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a val

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a val

The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to th

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, an

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3,

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens No