2023

Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public

A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32

The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allo

The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong t

The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to

The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to g

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input p

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.

github.com/crewjam/saml is a saml library for the go language. In affected versions the package does not validate the AC

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions

Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, t

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext

Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nex

An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attac

silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a re

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack ove

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack over

Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's aut

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux al

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an auth

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allo

Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP server

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.

Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin <=

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Timely - Appointment software Timely Booking Button pl

Cross-Site Request Forgery (CSRF) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin <

Cross-Site Request Forgery (CSRF) vulnerability in Taggbox plugin <= 2.9 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Gilles Dumas which template file plugin <= 4.6.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in 10 Quality Post Gallery plugin <= 2.3.12 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <= 3.2.4 vers

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce pl

Auth. (contributo+) Stored Cross-Site Scripting (XSS) vulnerability in Cytech BuddyMeet plugin <= 2.2.0 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robin Wilson bbp style pack plugin <= 5.6.7 vers

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny Carousel Horizontal Slider plugin <

Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana,

Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versio

Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <= 1.25 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Caret Inc. Caret Country Access Limit plugin <= 1.0.2 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Codex-m Sort SearchResult By Title plugin <= 10.0 versions.

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially