2023

Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the d

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send b

Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker w

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects A

Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to differe

Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards

Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user cli

Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a me

Mattermost fails to check whether the  “Allow users to view archived channels”  setting is enabled during permalink prev

Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a

Mattermost fails to use  innerText / textContent when setting the channel name in the webapp during autocomplete, allowi

Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post.

The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open

A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vul

A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is

A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects th

A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical. This vulnerabili

A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknow

A vulnerability, which was classified as critical, has been found in Xiamen Four-Faith Video Surveillance Management Sys

A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is

A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as c

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been dec

A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the fi

A vulnerability was found in CSZCMS 1.3.0 and classified as critical. Affected by this issue is some unknown functionali

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affec

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Af

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanni

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the

A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unkn

A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main

A vulnerability classified as problematic has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This a

A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown func

Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the sam

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficien

CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. In affected versions successful lo

CodeIgniter Shield is an authentication and authorization provider for CodeIgniter 4. The `secretKey` value is an import

capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalati

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escala

google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the

A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by

A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnera

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensit

Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to dele

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. The information ex

RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the password encryption utility (R