2023

A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a

Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking

Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker

Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

Authenticated users were able to enumerate other users' names via the learning plans page.

The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not ap

If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presen

Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only

Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only avail

NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/s

In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versio

In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is v

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the

A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized

The course participation report required additional checks to prevent roles being displayed which the user did not have

A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations si

A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the sy

A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This fl

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue c

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are n

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are n

Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the imple

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Limit

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Acces

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of ba

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability aff

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the f

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation

Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset o

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and cod

A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functio

Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.

An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPre

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 vers

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klaviyo, Inc. Klaviyo plugin <= 3.0.7 versions.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with D

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial

A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in

A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPW

A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary co