2023

The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vul

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attac

In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make

In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a com

SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.2

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities t

SAP HCM Fiori App My Forms (Fiori 2.0) - version 605, does not perform necessary authorization checks for an authenticat

Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauth

Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack.

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnera

Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wac

A man in the middle can redirect traffic to a malicious server in a compromised configuration.

A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web script

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an

A user with a compromised configuration can start an unsigned binary as a service.

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privi

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventu

A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress. T

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects u

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2

Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vuln

The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing a

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which co

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before output

The Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high

The Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-pri

The Auto Rename Media On Upload WordPress plugin before 1.1.0 does not sanitise and escape some of its settings, which c

The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in ifr

The WordPress Amazon S3 Plugin WordPress plugin before 1.6 does not sanitise and escape a parameter before outputting it

The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before di

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attrib

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings p

The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputt

A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an atta

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause t

A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse t

A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This a

This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-j

A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic. Affected by this issue is the f

An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by

A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by thi