2023

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the

Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/abs

In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthent

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud S

Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 ins

libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in work

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 1.9.9 ve

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs

Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter un

A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown

The Mega Main Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters

Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthor

Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploite

Cross-Site Request Forgery (CSRF) vulnerability in German Mesky GMAce plugin <= 1.5.2 versions.

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust P

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown pre

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecomm

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System

Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup

A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App

The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This

Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges

A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnera

A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This af

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected i

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. T

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability a

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability a

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown c

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerabilit

A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the f

A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown funct

A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an un

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy p

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of t

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parame

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw paramete