2023

Microsoft Defender Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

Service Fabric Explorer Spoofing Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arb

A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arb

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user wh

BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter i

A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and cred

A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown

A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affecte

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problemat

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. Thi

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected b

A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management Syst

HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using worklo

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s v

Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. This vulnerabili

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applicat

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affecte

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affecte

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affecte

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAM

Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Kesz1 Technologies ipBlockList plugin <= 1.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versio

Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software

Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blockin

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Go Maps (formerly WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder

Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file cont

Cross-Site Request Forgery (CSRF) vulnerability in Dannie Herdyawan DH – Anti AdBlocker plugin <= 36 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Slider by Supsystic plugin <= 1.8.5 versions.

In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server