2023

Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for

Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusti

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of c

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affe

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions

Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected

Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java S

On affected Wago products an remote attacker with administrative privileges can access files to which he has already acc

IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could d

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a det

IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IB

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained acc

Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it po

Discourse is an open source platform for community discussion. Attackers with details specific to a poll in a topic can

An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate th

IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validati

IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive informatio

A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emo

A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. Th

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown pr

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability af

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unkno

A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vuln

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature wh

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debu

Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authoriza

vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources

A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1

A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue af

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0,

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through

An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allow

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unkno

A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filt

IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to de

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

Gradle is a build tool with a focus on build automation and support for multi-language development. When copying or arch

Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store

IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a se

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been rated as problematic. Affected by this issue

A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this issue is

A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this vuln

A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unk

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.