2023

A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/g

A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code o

A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuth

Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` sp

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These

A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the fi

A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result

A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown

Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validat

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module

Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiratio

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible

Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortab

mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerab

IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to t

CakePHP is a development framework for PHP web apps. In affected versions the `Cake\Database\Query::limit()` and `Cake\D

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to

The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attack

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessibl

An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct

An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vuln

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a

A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions start

Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and

github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Ser

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS

The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Inject

Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.

A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Se

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory

IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed ho

TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacke

A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.

A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root

An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileg

A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vu

A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an u

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which ca

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an atta

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach