2023

WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be abl

NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.

A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unkn

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy

Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As i

Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information t

Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 o

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `b

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code

wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-

Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.

A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attac

There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An a

There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that t

There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a vali

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j_security_check via

The Quick Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptiona

Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter.

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 p

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version i

Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/i

Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openca

LimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /index.p

A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute ar

Magneto LTS (Long Term Support) is a community developed alternative to the Magento CE official releases. Versions prior

An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via

Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy

A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affecte

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Af

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical.

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critic

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit