2023

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scriptin

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754,

Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated h

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks f

Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthentic

A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attac

Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to u

Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.

A vulnerability classified as critical was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0

PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site reques

The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-p

The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some

The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually

The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes bef

The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored c

The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting

The Client Logo Carousel WordPress plugin through 3.0.0 does not validate and escape some of its shortcode attributes be

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attr

The Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its

The Video Background WordPress plugin before 2.7.5 does not validate and escape some of its shortcode attributes before

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attribu

Cross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service via the Post function.

Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3.0.2 versions.

Cross-Site Request Forgery (CSRF) vulnerability in A2 Hosting A2 Optimized WP plugin <= 3.0.4 versions.

Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin <

Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic plugin <= 5.1.9.2 versions.

A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user t

McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the co

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could

McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via

The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in vers

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container duri

Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.

Cross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plug

A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This

An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web se

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected b

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.

In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned p

In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permi

A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerabilit

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critica

A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0.

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determi

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-1

A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. T