2023

ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF).

A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Af

An issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability affects the setup panel

Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requ

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unk

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause

Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability aff

A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepo

The application suffers from improper access control when editing users. A user with read permissions can manipulate

The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileg

A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by t

Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based

ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the S

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability i

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown funct

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High module

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High module

A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the functi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in TotalPress.Org Custom post types, Custom Fields & more

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and s

Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowl

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Borbis Media FreshMail For WordPress plugin <= 2.3.2 versi

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vark Minimum Purchase for WooCommerce plugin <= 

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver

The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary num

An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur for a crafted BGP UPDATE message without manda

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MP_REACH_NLRI data, leading to a crash.

It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whe

If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitl

Xolo CMS v0.11 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.

Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attack

era-compiler-vyper is the EraVM Vyper compiler for zkSync Era, a layer 2 rollup that uses zero-knowledge proofs to scale

Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP r

D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures. Prior to v

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy config

A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with k

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 1

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.1