2023

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage.

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen

SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqs

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Af

A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An a

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissio

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for Growt

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}.

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favic

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted n

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-

PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment suppo

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to t

The VTEX [email protected] GraphQL API module does not properly restrict unauthorized access to private configuration dat

An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrec

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affe

hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_con

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows r

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can

Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by de

Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, an

Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost

Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it usi

When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_delete

When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of

A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part o

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affect

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affe

A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YKM YKM CRM allows

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardw

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Fo

Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands.

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles inval

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invali

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unkn