2023

The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved ema

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName

A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. A

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP req

Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upg

In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for register

In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NT

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.

Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leadin

Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, pr

Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrol

LiteDB is a small, fast and lightweight .NET NoSQL embedded database. Versions prior to 5.0.13 are subject to Deserializ

An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a cr

File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive informatio

Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as prob

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3

In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obt

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class w

An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/m

An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.

Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive info

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a craf

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in ver

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in ver

A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note

IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This iss

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Pro

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop P

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affect

A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functional

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.

A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0

A vulnerability was found in Twister Antivirus 8.17. It has been declared as critical. This vulnerability affects the fu