2023

Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <= 4.5.1 versions.

Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin <= 4.7.1 versions.

Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory Manager plugin <= 2.1.0.13 versions.

Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions.

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow

Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary

Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view se

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed

The filepath package does not recognize paths with a \??\ prefix as special. On Windows, a path beginning with \??\ is a

blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Michael Mann Simple Site Verify plugin <= 1.0.7 versio

Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.4.2 versions.

A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb

The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications

The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifi

The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to

The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications

Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability

The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissio

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engine

The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vu

The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vu

Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allo

The leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers to send malicious notifi

The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notificatio

The leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send malicious notifications

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notific

The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications

The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of t

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Teli

A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinte

In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE atta

Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code

A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterio

CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a c

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive informati

Cross Site Scripting vulnerability in MLDB.ai v.2017.04.17.0 allows a remote attacker to execute arbitrary code via a cr

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.pa

A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and be

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profi

HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to exe

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmw

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmwa

A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated pr