2022

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entrie

pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working direc

A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog fold

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing hi

The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before ou

The Simple Post Notes WordPress plugin before 1.7.6 does not sanitise and escape its settings, allowing high privilege u

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting th

The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privileg

The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attr

The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing

The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privile

The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high pri

The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them bac

The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate

The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as ad

The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table se

The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege user

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitiz

The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back i

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions s

The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related t

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying pr

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknow

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown proce

A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function

A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unkno

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issu

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown pa

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown

A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerabi

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client

EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d.

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system comm

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite h

The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service (DoS) via the util.