2022

The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction

The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow

The CaPa Protect WordPress plugin through 0.5.8.2 does not have CSRF check in place when updating its settings, which co

The WPlite WordPress plugin through 1.3.1 does not have CSRF check in place when updating its settings, which could allo

The Amazon Einzeltitellinks WordPress plugin through 1.3.3 does not have CSRF check in place when updating its settings,

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which

The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, w

The PDF24 Article To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, wh

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which cou

The Multi-page Toolkit WordPress plugin through 2.6 does not have CSRF check in place when updating its settings, which

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its sett

The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which

The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users,

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, w

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text

The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of lon

The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is ac

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerabili

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17.

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API func

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown proces

A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknow

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unkno

A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.c

In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” fu

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decode_pulses. The man

A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the func

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_heade

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit

A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the functi

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions,

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a

A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffe

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown function

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_fram

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the f

A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the func

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_sl

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file

A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the fi

A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_

A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the functi

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_head