2022

The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secr

The Add Comments WordPress plugin through 1.0.1 does not sanitise and escape some of its settings, which could allow hig

The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API request

The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin befo

The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it

The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read an

The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could a

The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow hig

The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator'

The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which

The Advanced WP Columns WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could al

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using the

The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privileg

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirect

Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (

Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any pre

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerabi

Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulner

In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation o

In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privi

In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation

In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead t

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead t

In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privi

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg

In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wit

In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.

Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.

A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functional

A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown f

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to o

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacke

TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0

Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users t

Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software ve