2023

Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be pas

Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web ba

Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload

D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.

D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escala

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege

A vulnerability classified as problematic was found in Responsive Menus 7.x-1.x-dev on Drupal. Affected by this vulnerab

A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Af

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose se

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic

A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMe

Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link cl

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability all

IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that

A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0. Affected is an unknown function o

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function get_url in the l

A vulnerability was found in Zhong Bang CRMEB 4.6.0. It has been declared as critical. This vulnerability affects the fu

A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this i

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS c

GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-th

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affecte

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. Affec

tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows th

A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue aff

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. This a

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. A

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part

A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password u

An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute a

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_en

In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the

The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reT

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version `0.6.1`,

A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to exec

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulner