2023

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jewel Theme WP Adm

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Zinc Page Gener

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eyal Fitoussi GEO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plug

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.

examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this paramete

Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application cras

ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.

ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscre

TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandbox

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected

Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE be

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?acti

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?acti

The [`tj-actions/verify-changed-files`](https://github.com/tj-actions/verify-changed-files) action allows for command in

Visual Studio Code Python Extension Remote Code Execution Vulnerability

easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule.

Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes ar

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks

The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev wo

Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests bein

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution Impreza

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Log

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WS Form WS Form LI

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ian Kennerley Goog

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator

Improper Control of Generation of Code ('Code Injection') vulnerability in BinaryStash WP Booklet.This issue affects WP

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affec

A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slic

A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerabi

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attacker

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote atta

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause i

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote atta

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged

mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms –

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcar