2022

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of priv

In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of p

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS

The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users

The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privileg

The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, wh

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due

The WordPress Popup WordPress plugin through 1.9.3.8 does not sanitise and escape some of its settings, which could allo

The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not validate, sanitise and escape some of its sett

The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editi

The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exp

The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which cou

The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not have CSRF check in place when updating its set

The GiveWP WordPress plugin before 2.21.3 does not properly sanitise and escape the currency settings, which could allow

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-si

The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back

The Progressive License WordPress plugin through 1.1.0 is lacking any CSRF check when saving its settings, which could a

The Microsoft Advertising Universal Event Tracking (UET) WordPress plugin before 1.0.4 does not sanitise and escape its

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with a

Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of pr

Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement vi

The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via

The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOT

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download func

Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters

The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-pri

The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer over

This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has

IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 thro

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for user

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to elevate their privilege to pl

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the fil

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentia

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of whic

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could all

The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerabilit

Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders i

EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user in

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerabil

DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.