2023

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and ea

Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthentic

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soap

Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the appli

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated atta

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.

Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is

A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to

Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to injec

Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL command

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection

Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.

An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins

An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins

An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins

An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default ins

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 3com – Asesor de Cookies para normativa española plugi

IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on sev

The Social Warfare plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.

The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on sever

An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code

Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation v

The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file mi

A vulnerability was found in gitter-badger ezpublish-modern-legacy. It has been rated as problematic. This issue affects

A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processi

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Af

A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulat

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function build_view of the f

A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this is

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects th

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_co

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which

Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory

OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This i

RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious applicatio

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java application server can be used

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common Gateway Interface (CGI) progr

Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally all

A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). Multiple endpoin

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint notify.localizeEmailTemplat

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The action xmlexport accepts the paramet

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint itemtemplate.createtemplate

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request handler for ll.KeepAliveSess