2023

In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned p

In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permi

Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment fea

A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerabilit

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critica

A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic.

A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0.

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determi

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

A vulnerability was found in dd32 Debug Bar Plugin up to 0.8 on WordPress. It has been declared as problematic. Affected

A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1

A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19

A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-1

A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. T

A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_r

A vulnerability, which was classified as problematic, has been found in Hsycms 3.1. Affected by this issue is some unkno

HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle dest

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database

A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing co

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of

A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileU

An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and datab

A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inje

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sa

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connect

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows a

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the

Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins v

flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has alrea

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulner

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via

A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quaranti

A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to es

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker t

IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST he

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common R

Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Man

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities

NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious