2022

Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_c

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versio

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affect

A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unkn

A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.

A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/Zy

A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0

Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows

The Simple Blog plugin in Wondercms 3.4.1 is vulnerable to stored cross-site scripting (XSS) vulnerability. When any use

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.

Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate

Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NetDataSoft DivvyD

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products whil

Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8.

The Curtain WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high pri

The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back i

The Sliderby10Web WordPress plugin before 1.2.52 does not properly sanitize and escape some of its settings, which could

The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged

The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the

The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 does not sanitise and escape some parameters before outputti

The Domain Replace WordPress plugin through 1.3.8 does not sanitise and escape a parameter before outputting it back in

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting

The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an

JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality ca

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provi

NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.co

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TF

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

TensorFlow is an open source platform for machine learning. In version 2.8.0, the `TensorKey` hash function used total e

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used fo

Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) atta

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple T

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem