2023

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinder Doofinde

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NextScripts NextSc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fabio Marzocca Lis

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gilles Dumas which

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captainform Forms

In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on t

By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent

Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file wit

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated rem

TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registr

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a

The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type val

The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the '

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated r

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users ar

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauth

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap cor

Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engag

Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap

Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap

Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap c

Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corr

An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certa

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1,

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backu

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the s

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the

An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raghu Goriya MyTub

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBloc

Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could p

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. 

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J.N. Breetvelt a.K

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Raschendorfe