2023

An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Netwo

In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/

In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.

A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown

A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the

A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by th

A vulnerability classified as critical has been found in KylinSoft kylin-system-updater up to 2.0.5.16-0k2.33. Affected

A vulnerability was found in Uniway UW-302VP 2.0. It has been rated as problematic. This issue affects some unknown proc

A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a publi

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitati

Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated

An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthentica

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Deis Workflow Manager up to 2.3.2. It has been classified a

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'et_pb_text' shortcode in all

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prio

AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object k

Symbolicator is a service used in Sentry. Starting in Symbolicator version 0.3.3 and prior to version 21.12.1, an attack

Gradio is an open-source Python package that allows you to quickly build a demo or web application for your machine lear

Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them

Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0.

yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0.

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potent

The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing appl

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl

Cacti is an open source operational monitoring and fault management framework. A reflection cross-site scripting vulnera

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior t

Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in ver

A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees be

IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affe

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an u

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue af

An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In i

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This aff

Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB).

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this

ONTAP Mediator versions prior to 1.7 are susceptible to a vulnerability that can allow an unauthenticated attacker to e

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exp

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being tran