2022

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fiel

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s para

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page

Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to acces

The Latest Tweets Widget WordPress plugin through 1.1.4 does not have CSRF check in place when updating its settings, wh

The Webriti SMTP Mail WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which c

The OnePress Social Locker WordPress plugin through 5.6.2 does not have CSRF check in place when updating its settings,

The Email Users WordPress plugin through 4.8.8 does not have CSRF check in place when updating its settings, which could

The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the p

The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted reque

The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, wh

The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor do

Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an at

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high

The Slideshow CK WordPress plugin before 1.4.10 does not sanitize and escape Slide's descriptions, which could allow hig

The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured o

The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e

The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting t

flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index p

The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX

Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.

Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some un

A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown fun

Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function. By explo

Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a pl

Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthen

Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrativ

A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inje

GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execut

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability

A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is so

A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulner

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the val

An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp.

An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h.

Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4Dat

ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.

Due to an insecure design, the Lepin EP-KP001 flash drive through KP001_V19 is vulnerable to an authentication bypass at

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration i

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper val

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a pa

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lis

A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functi

A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the f

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown par