2023

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker t

An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that cau

A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and

A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x

A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affecte

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue aff

A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This

A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0.

A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0,

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. T

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto:

All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to

All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel m

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/downloa

Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for a

Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position i

A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that cause

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8

REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.

Code Injection in GitHub repository builderio/qwik prior to 0.21.0.

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows at

An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitra

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allo

wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_6

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a cra

There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploit

There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited

SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the l

SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to re

wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a

Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time t

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific

xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are confi

onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when buildi

A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some

A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. A

A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown proces

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operat

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vuln

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploi