2023

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height gre

A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under ce

The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTM

The Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attr

The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute,

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plug

The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, whi

The File Away WordPress plugin through 3.9.9.0.1 does not validate and escape one of its shortcode attributes, which cou

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrar

AMI BMC contains a vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes

In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible

The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StPeteDesign Call Now Accessibility Button plugin <= 1

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in unFocus Projects Scripts n Styles plugin <= 3.5.7 vers

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Phan Chuong IP Metaboxes plugin <= 2.1.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ludwig Media UTM Tracker plugin <= 1.3.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snipp

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management

EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS).

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plug

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GalleryPlugins Video Contest plugin <= 3.2 versions.

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that disc

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.

A vulnerability, which was classified as critical, has been found in PHPGurukul Teachers Record Management System 1.0. A

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service b

Pega Platform versions 7.2 to 8.8.1 are affected by an XSS issue.

A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code vi

An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent denial of service via the da

An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manip

An issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent denial of service by ma

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipu

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via t

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI throu

The WP Activity Log for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0. T

The WP Activity Log Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the