Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.
A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin…
An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.
Redisgraph
CRITICAL 9.8
An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafted string in DataBlock_ItemIsD…
An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untr…
Statamic is a flat-first, Laravel + Git powered CMS designed for building websites. In affected versions certain additional PHP files crafted to look…
Azure DevOps Server Remote Code Execution Vulnerability
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Moodle
CRITICAL 9.8
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the …
Moodle
HIGH 8.8
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.
Moodle
HIGH 8.8
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.
WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.
An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a use…
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execut…
EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vul…
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section UR…
PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to t…
Subrion 4.2.1 has a remote command execution vulnerability in the backend.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.
Secure Firewall Management Center
HIGH 8.2
A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devic…
Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with malicious…
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.
baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. A…