2023

Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occu

Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerab

Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabo

PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-ho

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Thi

October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated back

October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated back

dpaste is an open source pastebin application written in Python using the Django framework. A security vulnerability has

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embe

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed te

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embe

IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper inp

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper inp

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive informa

IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information

SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Inj

D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at

Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/cu

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout comman

Cross-site Scripting (XSS) - Reflected in GitHub repository viliusle/minipaint prior to 4.14.0.

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Read Sensitive Strin

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection.

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Ac

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ArslanSoft Educati

Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is tran

The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-cod

The Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 pr

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corpor

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5

An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting

An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 13.2 before 16.4.3, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting fr

An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attackers

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the i

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter.

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitr

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitr

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitr

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malic