2022

Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordP

Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.

Multiple Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerabilities in WP Page Builder plugin <= 1.2.6 on WordPre

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.

Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress.

Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69 on WordPress.

Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress.

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.

Carel Boss Mini 1.5.0 has Improper Access Control.

InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent dir

It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is

The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly e

An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously cr

TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*`

TensorFlow is an open source platform for machine learning. An input `encoded` that is not a valid `CompositeTensorVaria

TensorFlow is an open source platform for machine learning. An input `token` that is not a UTF-8 bytestring will trigger

TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ResizeNearestNeighborGrad` is given a large

TensorFlow is an open source platform for machine learning. An input `sparse_matrix` that is not a matrix with a shape w

TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool

TensorFlow is an open source platform for machine learning. Inputs `dense_features` or `example_state_data` not of rank

TensorFlow is an open source platform for machine learning. If `SparseFillEmptyRowsGrad` is given empty inputs, TensorFl

TensorFlow is an open source platform for machine learning. If `FractionMaxPoolGrad` is given outsize inputs `row_poolin

TensorFlow is an open source platform for machine learning. If `ThreadUnsafeUnigramCandidateSampler` is given input `fil

TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`, Tensor

TensorFlow is an open source platform for machine learning. The reference kernel of the `CONV_3D_TRANSPOSE` TensorFlow L

TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value

TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListConcat` is given `element_shape=[]`

TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`, i

TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute,

TensorFlow is an open source platform for machine learning. When running on GPU, `tf.image.generate_bounding_box_proposa

TensorFlow is an open source platform for machine learning. `tf.keras.losses.poisson` receives a `y_pred` and `y_true` t

TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ImageProjectiveTransformV2` is given a larg

TensorFlow is an open source platform for machine learning. When `tf.raw_ops.FusedResizeAndPadConv2D` is given a large t

TensorFlow is an open source platform for machine learning. If a numpy array is created with a shape such that one eleme

TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value

In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRP

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings

TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a differing

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for

Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress.

Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress.

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transact

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on

Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.