2023

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industri

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Et

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial E

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Swi

A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the

Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and exe

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to vi

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affect

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Ranch

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain acce

A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SU

A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to conti

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler o

A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod a

A vulnerability was found in Custom-Content-Width 1.0. It has been declared as problematic. Affected by this vulnerabili

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows re

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locall

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-p

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.

A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 1

A vulnerability was found in OpenSeaMap online_chart 1.2. It has been classified as problematic. Affected is the functio

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experie

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an att

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow

A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could

A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.

syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesys

PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerabil

Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability.

A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test c

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will b

Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phi

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassin

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configur

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation

In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalat

In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote informat

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote esc

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote esc

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote esc

Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve hos

The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior t

**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR

All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL