2022

The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin da

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to w

The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpay_error parameter befor

The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, whic

The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high p

The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJA

The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_

The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_

The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an a

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with cla

The Cybersoldier WordPress plugin before 1.7.0 does not sanitise and escape the URL settings before outputting it in an

The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any

GPAC 1.0.1 is affected by Use After Free through MP4Box.

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.

GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.

With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder,

Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: Sm

Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with poss

If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer ov

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the reque

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This i

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have

phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number).

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by

Mirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate privileges. NOTE: this

Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The install

An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as dem

An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of eve

An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for u

An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web appli

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BH

An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but

GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitiv

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.

An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.

Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution (RC