2023

A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown funct

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unkno

A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could us

A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functiona

A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affecte

A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. Th

A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. Thi

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client ex

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the devic

Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerabi

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterpris

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH co

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in w

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly re

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an atta

ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Manageme

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0.

A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privil

Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when

Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to uploa

Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.

Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an ineffici

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares wi

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed us

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affecte

MindsDB is an open source machine learning platform. An unsafe extraction is being performed using `shutil.unpack_archiv

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versi

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.

An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project Op

A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.

An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImag

PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted inf

Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Onl

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master bran

Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forger

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, explo

Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from

AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campai

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Short

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.2 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Pag

Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.