2023

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

Information disclosure in Automotive multimedia due to buffer over-read.

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects

ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField

disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Graysc

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings i

IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain

IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attac

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in pla

IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to

Parse Server is an open source backend server. In affected versions the Parse Cloud trigger `beforeFind` is not invoked

hyper-bump-it is a command line tool for updating the version in project files.`hyper-bump-it` reads a file glob pattern

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subjec

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subjec

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builti

Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) list of expressions, the compil

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A

Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Use After Free in GitHub repository vim/vim prior to 9.0.1857.

Use After Free in GitHub repository vim/vim prior to 9.0.1840.

Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which co

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacke

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local

The 123.chat WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high pri

The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back

This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, a

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowin

The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high p

The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high p

The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back

The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allow

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users w

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Vathemes Business Pro theme <= 1.10.4 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Devaldi Ltd flowpaper plugin <= 1.9.9 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installatio

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Twinpictures Column-Matic plugin <= 1.3.3 versio

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kangu para WooCommerce plugin <= 2.2.9 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Pexle Chris Library Viewer plugin <= 2.0.6 versi

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Solwin Infotech Responsive WordPress Slider – Avartan Slid

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assista

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assista