2023

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that

Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)

Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted fi

An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary

An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to

An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privilege

A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown pa

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSW

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as c

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information T

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information T

Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.

Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series,

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.

A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks.

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exce

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of S

A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment var

Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stor

XWiki Platform is a generic wiki platform. Starting in version 3.2-m3, users can deduce the content of the password fiel

XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execut

XWiki Platform is a generic wiki platform. Starting in version 13.10, it's possible to use the right of an existing docu

XWiki Platform is a generic wiki platform. Starting in version 1.3-rc-1, any user with edit right can execute arbitrary

XWiki Platform is a generic wiki platform. Starting in version 6.2-milestone-1, one can execute any wiki content with th

XWiki Platform is a generic wiki platform. Starting in version 11.6-rc-1, comments are supposed to be executed with the

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t

XWiki Platform is a generic wiki platform. Starting in version 3.0-milestone-1, it's possible to execute a script with t

XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-mileston

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python excep

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python excep

A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elf_par

A vulnerability classified as problematic was found in SourceCodester Health Center Patient Record Management System 1.0

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text ar

A vulnerability has been found in 狮子鱼CMS and classified as critical. Affected by this vulnerability is the function good

XWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a store

XWiki Platform is a generic wiki platform. Starting in version 6.0, users with write rights can insert well-formed conte

XWiki Platform is a generic wiki platform. Starting in version 14.3-rc-1, `org.xwiki.store.script.TemporaryAttachmentsSc

XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it's possible to inject arbitrary wi

The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_ic

A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user deta

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vuln

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and

CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenti

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows atta