2023

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authen

NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" en

Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allo

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials.

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to s

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

A vulnerability was found in nickzren alsdb. It has been rated as critical. This issue affects some unknown processing.

A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown

A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects t

A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of th

A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing

A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability af

A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a speci

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS

Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a networ

OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a networ

TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerabil

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a

Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prio

Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PB

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, an

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, an

m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenti

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affecte

An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make imp

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8

Auth. SQL Injection (SQLi) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.

Cross-Site Request Forgery (CSRF) in MiKa's OSM – OpenStreetMap plugin <= 6.0.1 versions.

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbo

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC

Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi T

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may al

A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown funct

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulne

A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of

A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.pos

A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of t

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknow

The RSSImport WordPress plugin through 4.6.1 does not validate and escape one of its shortcode attributes, which could a

The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, whic

The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could a

The Real Testimonials WordPress plugin before 2.6.0 does not validate and escape some of its shortcode attributes before

The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attri

The Seriously Simple Podcasting WordPress plugin before 2.19.1 does not validate and escape some of its shortcode attrib

The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could al