2023

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in

An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a vis

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to caus

Cross-Site Request Forgery (CSRF) vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advance

Cross-Site Request Forgery (CSRF) vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through

An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to t

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and W

IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a

A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A us

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through

An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows att

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Younes JFR. Advanc

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Coupon

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GuardGiant Brute F

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI Ch

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porto Theme Porto

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vend

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for Salesforce and Contact Fo

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magazine3 Core Web Vitals & PageSpeed Booster.This

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordP

Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in in

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Swapnil V. Patil Login and Logout Redirect.This iss

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Search.This is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM,

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBook

Deserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Bu

Deserialization of Untrusted Data vulnerability in Rajnish Arora Recently Viewed Products.This issue affects Recently Vi

Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource

An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Requ

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could

An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) i

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r