2022

Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an insecure

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process in

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-contro

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress.

Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings dir

Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting.

Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

Reflected Cross-Site Scripting (XSS) vulnerability in smartypants SP Project & Document Manager plugin <= 4.59 at WordPr

Tabit - giftcard stealth. Several APIs on the web system display, without authorization, sensitive information such as h

Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containi

Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can m

Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addre

Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit

Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits

Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive infor

Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.

PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a

The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which c

The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which cou

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information a

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in

The WP phpMyAdmin WordPress plugin before 5.2.0.4 does not escape some of its settings, which could allow high privilege

The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that ca

The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami Wor

The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, w

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in

The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some o

The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing an

The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings,

The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow hi

The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing a

The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow

The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make

The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check author

The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logge

The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_re

The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting th

The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, w

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile

The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing h

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way t

A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an atta

There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signa

A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated

Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.

Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX ac