2023

A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the funct

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some u

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access an

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.

perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determin

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can

An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database executio

An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources

An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal pl

Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data

Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript

Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScri

The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who contr

lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists,

The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS prote