2023

The Groundhogg plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missi

The Groundhogg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Groundhogg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

Zulip is an open-source team collaboration tool with unique topic-based threading. In the event that 1: `ZulipLDAPAuthBa

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerabil

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x

IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to

IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. I

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSampl

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES

IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical e

DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian'

jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is on

A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firm

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the

Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with l

Metabase is an open source business analytics engine. To edit SQL Snippets, Metabase should have required people to be i

A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue o

OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorize

SofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.

Compiler removal of buffer clearing in sli_se_driver_mac_compute in Silicon Labs Gecko Platform SDK v4.2.1 and earli

Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier r

Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and e

Compiler removal of buffer clearing in sli_se_opaque_import_key in Silicon Labs Gecko Platform SDK v4.2.1 and ea

Compiler removal of buffer clearing in sli_se_driver_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and ea

An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the d

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacke

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacke

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to co

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming serve

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.

A vulnerability, which was classified as problematic, has been found in cnoa OA up to 5.1.1.5. Affected by this issue is

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TheGuideX User IP and Location plugin <= 2.2 ver

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Infra

Cross-Site Request Forgery (CSRF) vulnerability in Ramon Fincken Mass Delete Unused Tags plugin <= 2.0.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Ramon Fincken Auto Prune Posts plugin <= 1.8.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Studio Wombat Shoppable Images plugin <= 1.2.3 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterInsights plugin <= 8.14.0 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <= 3.7.0.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matt Gibbs Custom Field Suite plugin <= 2.6.2.1 versio

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Haoqisir Baidu Tongji generator plugin <= 1.0.2 versio

The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/em

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read i

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read i

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read i

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au