2023

Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loading modul

User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an a

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests

Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerabil

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allo

An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4

Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located

Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web server to send

The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versi

Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile() API. Th

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensiti

Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1.

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traver

SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway res

Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and pri

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted message

An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted mes

An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send craf

Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary c

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior

An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted m

An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token and sen

An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted mes

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send craf

Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote a

A potential attacker with or without (cookie theft) access to the device would be able to include malic

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to t

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has

A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is c

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execut

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in Add Accounts via Invoice No, To, and

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When u

A vulnerability classified as problematic was found in SourceCodester My Food Recipe 1.0. This vulnerability affects unk

A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the f

A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been rated as critical. Affected by this issue is some unk

A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been declared as critical. Affected by this vulnerability

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown c

A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /cat

A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulner

A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functiona

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an

A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..

A vulnerability classified as critical was found in Tongda OA. This vulnerability affects unknown code of the file gener

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affe

A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown fu

A vulnerability was found in spider-flow up to 0.5.0. It has been declared as critical. Affected by this vulnerability i

A vulnerability was found in Sakshi2610 Food Ordering Website 1.0 and classified as critical. This issue affects some un

A vulnerability, which was classified as problematic, was found in Topaz OFD 2.11.0.201. This affects an unknown part of

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary w

The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-