2023

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected

Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value fro

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php.

An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a r

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbit

When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused a

There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implement

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order par

The Active Directory Integration plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and orde

The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deseria

The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, a

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_conte

The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including,

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in ver

The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including,

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and in

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) b

snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 vi

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minu

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentia

gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snow

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying t

Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another stu

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_m

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function

Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path f

The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within we

A user could use the “Upload Resource” functionality to upload files to any location on the disk.

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess ve

Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to stack-based buffer overflow, which c

Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which cou

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing

SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remot

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.

Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as

mailcow is a mail server suite based on Dovecot, Postfix and other open source software, that provides a modern web UI f

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions sta

Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to

Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network acc

alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.

Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability