2022

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.

Auth. (subscriber+) CSV Injection vulnerability in ProfileGrid plugin <= 5.1.6 on WordPress.

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Ezoic plugin <= 2.8.8 on WordPress.

Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The s

Webvendome - webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. I

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webpsilon ULTIMATE TABLES plugin <= 1.6.5 versions.

In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation.

In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead

In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escal

In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local

Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attacke

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a s

Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.

A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to caus

A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage Application v1.0 allows atta

Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue wh

A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some un

A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknow

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 thr

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows use

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users w

Keyfactor EJBCA before 7.10.0 allows XSS.

A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-priv

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers t

Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DO

An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the n

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient output encoding of user-supplied data, the

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retri

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length val

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check fo

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length val

KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vul

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGF

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be r

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.

Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.

A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attacker

The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malici

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.