2022

The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in vers

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Caption

The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post/page

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `pro_version_activation_code

The WP-UserOnline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘templates[browsingpage][tex

The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenti

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticate

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via th

The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' val

The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]

The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input

The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, an

The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion in versions up to, and including 3.2.

The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Bloc

The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, an

The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kern

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4.

Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated att

An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 conn

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7

In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o

In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of

In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di

In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di

In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege wi

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosu

In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local informatio

In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of pri

In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privil

In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit

In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function o