2023

In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to

Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.

Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

A vulnerability classified as critical has been found in karsany OBridge up to 1.3. Affected is the function getAllStand

A vulnerability was found in tombh jekbox. It has been rated as problematic. This issue affects some unknown processing

A vulnerability was found in krail-jpa up to 0.9.1. It has been classified as critical. This affects an unknown part. Th

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-1

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue i

A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerabili

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by

A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affec

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unk

A vulnerability was found in SourceCodester Online Food Ordering System. It has been rated as critical. Affected by this

A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown

A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of

A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown f

A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function get

A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The man

A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown cod

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown func

A vulnerability, which was classified as critical, has been found in pointhi searx_stats. This issue affects some unknow

A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might co

Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/r

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipul

A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the funct

A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file re

Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.

Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.

Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

Broken Access Control in Betheme theme <= 26.6.1 on WordPress.

Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver.

When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an auth

Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unse

Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an