2022

The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via th

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to r

Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.

An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR managemen

Authenticated (admin+) Cross-Site Scripting (XSS) vulnerability in wpdevart Poll, Survey, Questionnaire and Voting syste

Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress lead

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Directory Traversal in versions up

The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions

The WP-UserOnline plugin for WordPress has multiple Stored Cross-Site Scripting vulnerabilities in versions up to, and i

The WP Cerber Security plugin for WordPress is vulnerable to security protection bypass in versions up to, and including

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image U

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Image UR

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Edi

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption'

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Caption

The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post/page

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `pro_version_activation_code

The WP-UserOnline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘templates[browsingpage][tex

The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenti

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticate

The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Bloc

The Ultimate SMS Notifications for WooCommerce plugin for WordPress is vulnerable to CSV Injection in versions up to, an

The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kern

Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated att

A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7

In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o

In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of

In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di

In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di

In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege wi

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosu

In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local informatio

In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of pri

In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privil

In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit

In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function o