2023

GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signature

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions prior to 2.25.6, due to insufficient access-l

Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.2.8 versions.

Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0.

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerabili

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affect

In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.

In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.

In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.

Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart <= 1.4.4 versions.

Cross-Site Request Forgery (CSRF) vulnerability in MainWP Matomo Extension <= 4.0.4 versions.

Cross-site scripting in outage/list.htm in multiple versions of OpenNMS Meridian and Horizon allows an attacker access t

Reflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an atta

Multiple stored and reflected cross-site scripting vulnerabilities in webapp jsp pages in multiple versions of OpenNMS M

Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon c

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affect

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affe

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue af

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Softw

Privilege Escalation vulnerability in Apache Software Foundation Apache Sling. Any content author is able to create i18n

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Te

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usab

ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Adminis

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was all

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, al

File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and possibly earlier versions, allows attack

typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controll

A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated

A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7

The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious pr

pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.

Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file.

Misskey is an open source, decentralized social media platform. In versions prior to 13.3.3 SQL injection is possible du

Misskey is an open source, decentralized social media platform. In versions prior to 13.3.2 the URL preview function is

Misskey is an open source, decentralized social media platform. Due to insufficient validation of the redirect URL durin

An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password.

A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerab

Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap

Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap c

Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the

Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap c

Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit

Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap

Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had