2022

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, conta

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, con

UnsafeAccessor (UA) is a bridge to access jdk.internal.misc.Unsafe & sun.misc.Unsafe. Normally, if UA is loaded as a nam

IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system.

The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used

The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow h

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting pa

The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make any

The Bold Page Builder WordPress plugin before 4.3.3 does not sanitise and escape some of its settings, which could allow

The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege user

The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which co

The Shortcut Macros WordPress plugin through 1.3 does not have authorisation and CSRF checks in place when updating its

The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputt

The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a header when processing request to generate

The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an

The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter befor

The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high priv

The pagebar WordPress plugin before 2.70 does not have CSRF check in place when updating its settings, which could allow

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login

The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could al

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowi

The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users l

The WooCommerce - Product Importer WordPress plugin through 1.5.2 does not sanitise and escape the imported data before

The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in

The FoxyShop WordPress plugin before 4.8.2 does not sanitise and escape a parameter before outputting it back in an admi

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is vi

Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.

H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.

Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacke

Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated atta

Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary s

Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.53.3.

In Joomla component 'Joomlatools - DOCman 3.5.13 (and likely most versions below)' are affected to an reflected Cross-Si

Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform

Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection. A remot

IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulner

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by