2022

The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system

The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as w

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does no

The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, a

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload function

The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting

The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL s

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an i

The Responsive Lightbox2 WordPress plugin before 1.0.4 does not validate and escape some of its shortcode attributes bef

The WP Stripe Checkout WordPress plugin before 1.2.2.21 does not validate and escape some of its shortcode attributes be

The Videojs HTML5 Player WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes bef

The Flowplayer Video Player WordPress plugin before 1.0.5 does not validate and escape some of its shortcode attributes

The Checkout for PayPal WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes bef

The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessi

The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow u

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow h

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRo

A vulnerability classified as critical has been found in pacman-canvas up to 1.0.5. Affected is the function addHighscor

A vulnerability was found in oils-js. It has been declared as critical. This vulnerability affects unknown code of the f

A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the functio

A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the f

A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can le

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI componen

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could

HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This coul

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Br

A vulnerability classified as critical was found in Click Studios Passwordstate and Passwordstate Browser Extension Chro

 In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-d

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. T

Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via Tic

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TE

GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the net

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of

Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to

Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated atta

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS com

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative