2023

Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Short

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.2 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Pag

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10

Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an att

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing al

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resou

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angul

HashiCorp Vault's implementation of Shamir's secret sharing used precomputed table lookups, and was vulnerable to cache-

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer met

HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when config

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in JoomUnited WP Table Manager plugin <= 3.5.2 vers

NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.

NASM v2.16 was discovered to contain a null pointer deference in the NASM component

runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor ca

runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was f

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Usersnap plugin <= 4.16 versions.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-L

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRA

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRA

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRA

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRA

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kerne

This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed