2022

An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.

A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.

A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a ma

Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.

A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerabi

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affect

A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affect

A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulner

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stress

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects so

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the co

A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the ar

A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the

A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the

A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerabi

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the compon

Under certain conditions, SAP Innovation management - version 2.0, allows an attacker to access information which could

Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO.

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff f

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting fr

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 befor

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigg

Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows a

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions start

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting fr

An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since re

A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnera

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 an

An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Priv

In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of p

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before usi

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as r

The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a speci

The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters befo

The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it i

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write

The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any cu

The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configurati

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is

The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the post_type parameter before outputting i

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it b

The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting

The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an ad

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it

The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it bac

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting

The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id par