2023

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vul

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verifie

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' p

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' param

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issu

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' pa

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price'

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' pa

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password'

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' p

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address'

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' par

GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unv

Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowin

Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, ins

Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code.

Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be inje

Presentations may contain references to images, which are user-controlled, and could include malicious script code that

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before

RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent

Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting thi

Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vuln

Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed uncheck

A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected i

The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation i

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access contr

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the fo

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/t

A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the funct

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /

Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privilege

Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for ot

Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enro

Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowi

The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9

Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain cre

Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a fa

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' p