2019

The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page p

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS.

The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter.

The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF.

The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations

Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web s

Open redirect vulnerability in ApeosWare Management Suite Ver.1.4.0.18 and earlier, and ApeosWare Management Suite 2 Ver

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remo

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIP

Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web

Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter

Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via u

DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to i

Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via u

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session c

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressi

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property na

Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jen

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vu

Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property na

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method name

OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMea

The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memo

A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'W

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to proper

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce f

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sa

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly san

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to s

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web req

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hy

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'R

A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of req

An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory