2023

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions startin

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions starting from 15.11 bef

A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulne

A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0. This af

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Af

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.

VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the V

The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for bwg_frontend_data. NOTE: other p

The WooCommerce Multi Currency plugin for WordPress is vulnerable to authorization bypass due to a missing capability ch

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and inc

Missing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME Business Hub before 1.4.0 has left users vulne

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, thi

Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole

The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about

A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the mac

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to

Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior,

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior,

The B2BKing plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the '

The B2BKing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The FlyingPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and in

The Doneren met Mollie plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2

The WooCommerce Multi Currency plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu

The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on t

The WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versi

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Setting Changs in versions up to, and including, 5.5.

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and

The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Opti

The PWA for WP & AMP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up t

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and

The uListing plugin for WordPress is vulnerable to authorization bypass due to missing capability and nonce checks on th

The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_r

The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'tw

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions

The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 du

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti

The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are