2023

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in RVOLA WP Original Media Path plugin <= 2.4.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SparkPost plugin <= 3.2.5 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in nCrafts FormCraft plugin <= 1.2.6 versions.

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 11002

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 112011

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 110021

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Subscribers.Com Subscribers plugin <= 1.5.3 versions.

An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vuln

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce C

Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.

A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by th

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown f

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects so

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an

A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is

A vulnerability, which was classified as critical, has been found in SourceCodester Personnel Property Equipment System

A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability aff

Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information

An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally

VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to th

VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privil

IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB cred

IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webse

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ApexChat plugin <= 1.3.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin <= 2.1.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodeSolz Easy Ad Manager plugin <= 1.0.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SnapOrbital Panorama plugin <= 1.5 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS f

Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference par

Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenti

Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to po

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gautam Thapar Button Builder – Buttons X plugin

Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From version

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-c

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerr

Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments

Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.

Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users wi

A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown pro

Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instan