2023

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym(

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-la

Contao is an open source content management system. Starting in version 4.0.0 and prior to versions 4.9.42, 4.13.28, and

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,

Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a ma

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a ma

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache

In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible

In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers

In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access

Strapi is an open-source headless content management system. Prior to version 4.10.8, anyone (Strapi developers, users,

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 version

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Steven Henty Drop Shadow Boxes plugin <= 1.7.10 version

NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Ex

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows a

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicatin

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affec

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an un

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as critical. This issue aff

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a spec

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulner

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as critical. This affe

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this i

A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view P

A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected i

An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversa

A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via a

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. This vulnerability aff

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. This affects an u

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access s

A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML

A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary w

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulti

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue

A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. Th

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling o

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within

A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allo