2023

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gende

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the compa

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the addre

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the conta

Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on t

An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attack

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software UN

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Privat

Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress

Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions.

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affe

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/Ad

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet.

An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attacker

A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configura

In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathna

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to

Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an u

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GD

A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload v

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/managemen

OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the or

KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race

Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03

Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been disco

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versio

PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.

Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

Microsoft OneDrive for Android Information Disclosure Vulnerability

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

Microsoft OneDrive for Android Information Disclosure Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability