2023

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6

The Product Catalog Mode For WooCommerce WordPress plugin before 5.0.3 does not properly authorize settings updates or e

The Autocomplete Location field Contact Form 7 WordPress plugin before 3.0, autocomplete-location-field-contact-form-7-p

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6

The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient ch

IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser m

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constr

Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker

Cross-Site Request Forgery (CSRF) vulnerability in SVGator SVGator – Add Animated SVG Easily.This issue affects SVGator

Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements F

Cross-Site Request Forgery (CSRF) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affect

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot

Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a th

Cross-Site Request Forgery (CSRF) vulnerability in Saint Systems Disable User Login.This issue affects Disable User Logi

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Canada Post Shipping Method.This issue affects Canada Pos

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Bookings.This issue affects WooCommerce Booki

Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & A

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0.

Cross-Site Request Forgery (CSRF) vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu – W

Cross-Site Request Forgery (CSRF) vulnerability in Kevin Ohashi WPPerformanceTester.This issue affects WPPerformanceTest

Cross-Site Request Forgery (CSRF) vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First

Cross-Site Request Forgery (CSRF) vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Curr

IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker co

Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credenti

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated at

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a mal

A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that woul

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attack

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled

A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permission

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation.

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file.

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative right

An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthe

An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthentica

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker t

Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SS

Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Post Type Page Template.This issue affects C

Cross-Site Request Forgery (CSRF) vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpente

Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resul

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious comman

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS se

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting