2023

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are n

Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the imple

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Limit

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability aff

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the f

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation

A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functio

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPre

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 vers

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klaviyo, Inc. Klaviyo plugin <= 3.0.7 versions.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with D

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r

A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPW

A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary co

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local att

A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firep

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a direct

A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an

A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker t

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker t

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Goog

An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 ver

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Appl

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4

Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3.

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plug

Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin <= 3.5.1.9 versions.

Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unkn

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This v

A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. T

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Thi

A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical

Grafana is an open-source platform for monitoring and observability.  Grafana had a stored XSS vulnerability in the Gra

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c.

In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication.

A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary w

IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain

The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability

The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnera

The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripti