2023

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log fi

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown

A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerab

A vulnerability, which was classified as problematic, has been found in MuYuCMS 2.2. This issue affects some unknown pro

A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerab

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This aff

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by t

Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a

Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-c

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plan

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker coul

Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8

ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.

Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg.

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefa

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysC

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can mod

Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly

Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions

Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash t

The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.

pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.

The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization

The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerabili

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_or

An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an

A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not cl

A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to

A prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the

An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTT

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functional

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functional

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Appli

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export featur

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200,

A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender (FEX) when used i

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and C

A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated

The undertow client is not checking the server identity presented by the server certificate in https connections. This i

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).