2023

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknow

Headscale through 0.22.3 writes bearer tokens to info-level logs.

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. A

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execut

Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.

Gitsign is software for keyless Git signing using Sigstore. In versions of gitsign starting with 0.6.0 and prior to 0.8.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and pr

Piccolo is an object-relational mapping and query builder which supports asyncio. Prior to version 1.1.1, the handling o

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 5

An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition

A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit C

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Teli

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch an

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authentic

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authentic

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow a

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue a

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

Cross-Site Request Forgery (CSRF) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.4.1 versions.

Cross-Site Request Forgery (CSRF) vulnerability in ReCorp Export WP Page to Static HTML/CSS plugin <= 2.1.9 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions.

Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 versions.

Cross-Site Request Forgery (CSRF) vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for Wo

Cross-Site Request Forgery (CSRF) vulnerability in Robert Schulz (sprd.Net AG) Spreadshop plugin <= 1.6.5 versions.

Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute a

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of

Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute

IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a vulnerability to cause a denial

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.

sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sendin

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin <= 1.0.

Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 vers

Cross-Site Request Forgery (CSRF) vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme <= 7.1.1 versions.