2023

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vul

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critica

A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconne

A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion i

A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a use

A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another

A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context

An authenticated malicious user could successfully upload a malicious image could lead to a denial-of-service condition.

An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If

An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, des

Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to re

TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a

An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unautho

A cross-site scripting (XSS) vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web sc

SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the la

In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible

The Modern Events Calendar Lite WordPress plugin before 6.5.2 does not sanitise and escape some of its settings, which c

The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (Id

The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4

The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attacke

The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow

The WC Sales Notification WordPress plugin before 1.2.3 does not have CSRF check when activating plugins, which could al

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could a

The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape

The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow

The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its sh

The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address

The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attribut

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow use

The Ever Compare WordPress plugin through 1.2.3 does not have CSRF check when activating plugins, which could allow atta

The HT Politic WordPress plugin before 2.3.8 does not have CSRF check when activating plugins, which could allow attacke

The Free WooCommerce Theme 99fy Extension WordPress plugin before 1.2.8 does not have CSRF check when activating plugins

The WP News WordPress plugin through 1.1.9 does not have CSRF check when activating plugins, which could allow attackers

The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attac

The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow att

The QuickSwish WordPress plugin before 1.1.0 does not have CSRF check when activating plugins, which could allow attacke

The WP Education WordPress plugin before 1.2.7 does not have CSRF check when activating plugins, which could allow attac

The HT Portfolio WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attac

The HT Event WordPress plugin before 1.4.6 does not have CSRF check when activating plugins, which could allow attackers

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could

The Schedulicity WordPress plugin through 2.21 does not validate and escape some of its shortcode attributes before outp

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using

The menu shortcode WordPress plugin through 1.0 does not validate and escape some of its block options before outputting

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities whic

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with ro