Results
8,491 of 20,154· Page 6/170The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sSh
The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape th
The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter befo
The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which co
The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting bac
Wiki.js is a wiki app built on Node.js. Wiki.js versions 2.5.257 and earlier are vulnerable to stored cross-site scripti
HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possibl
`solidus_frontend` is the cart and storefront for the Solidus e-commerce project. Versions of `solidus_frontend` prior t
jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch
Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthent
Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthent
Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthent
Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows re
Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow
Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – C
It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate user
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management ri
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup
Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code vi
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field
Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad
Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /
Gurock TestRail before 7.2.4 mishandles HTML escaping.
Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attac
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursio
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due t
This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficien
message_bus is a messaging bus for Ruby processes and web clients. In versions prior to 3.3.7 users who deployed message
jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifyin
TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable t
Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT
Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information
In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of p
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile
In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of p
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of
Test your stack for 2021issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.