2023

The Modal Window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to ca

The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-tu

Authorization Bypass Through User-Controlled Key vulnerability in Usta AYBS allows Authentication Abuse, Authentication

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Adm

Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may ca

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up t

The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in vers

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable

Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, sho

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may u

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that

Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cy

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Ac

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Prote

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php.

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php.

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.

Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber

Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber

Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected:

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis C

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Li

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Wind

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Ac

Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: A

The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back

he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned i

The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft

The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamer

The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/

The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreenset

The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notificati

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /a

A reflected cross-site scripting (XSS) vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to ex

A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to exec

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parame

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir p

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClie

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security pa

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac paramet

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain para

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone pa