2023

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin use

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 i

There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code exe

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially

A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially craf

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a mali

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install

Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially ex

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject a

Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attack

Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and ea

Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter

isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for ex

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine co

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the fi

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jum

The PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an option.

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.

WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be abl

NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.

A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerabi

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an

A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic. This vulne

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.

Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects a

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by th

A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unkn

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy

Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As i

Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information t

Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 o

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 o

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `b

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code