2023

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory Sys

A vulnerability, which was classified as critical, was found in ayttm up to 0.5.0.89. This affects the function http_con

A vulnerability was found in iGamingModules flashgames 1.1.0. It has been classified as critical. Affected is an unknown

A vulnerability has been found in cfire24 ajaxlife up to 0.3.2 and classified as problematic. This vulnerability affects

A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnera

A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vul

A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function

A vulnerability has been found in Artesãos SEOTools up to 0.17.1 and classified as problematic. This vulnerability affec

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the func

authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. T

mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - wh

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh t

An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers

Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 24

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

RSSHub is an open source and extensible RSS feed generator. When the URL parameters contain certain special characters,

gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML authentication suppo

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-w

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file,

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENT

In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel.

Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side R

OpenZeppelin Contracts is a library for secure smart contract development. The ERC721Consecutive contract designed for m

On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injectio

Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an

Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi scrip

The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and

Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.

Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info T

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linu

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible su

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attac

A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse co

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netwo

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect s

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect s

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos t

A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domai