2022

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Employee Performance Evaluation System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerabil

Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Clo

Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can s

After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() funct

A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as cr

A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popup

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which

The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high priv

The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system

The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as w

The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an i

The Responsive Lightbox2 WordPress plugin before 1.0.4 does not validate and escape some of its shortcode attributes bef

The WP Stripe Checkout WordPress plugin before 1.2.2.21 does not validate and escape some of its shortcode attributes be

The Videojs HTML5 Player WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes bef

The Flowplayer Video Player WordPress plugin before 1.0.5 does not validate and escape some of its shortcode attributes

The Checkout for PayPal WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes bef

The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessi

The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow u

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow h

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRo

A vulnerability classified as critical has been found in pacman-canvas up to 1.0.5. Affected is the function addHighscor

A vulnerability was found in oils-js. It has been declared as critical. This vulnerability affects unknown code of the f

A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the functio

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the f

A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can le

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI componen

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Br

 In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-d