2023

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configura

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to t

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a funct

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated priv

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker wi

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker w

The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of

The WP Social Widget WordPress plugin before 2.2.4 does not validate and escape some of its shortcode attributes before

The WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputti

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could a

The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ens

The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before out

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes be

The CPT Bootstrap Carousel WordPress plugin through 1.12 does not validate and escape some of its shortcode attributes b

The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of

The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes befor

The Blog Designer WordPress plugin before 2.4.1 does not validate and escape one of its shortcode attributes, which coul

The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes,

Themify Shortcodes WordPress plugin before 2.0.8 does not validate and escape one of its shortcode attributes, which cou

The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, wh

The CC Child Pages WordPress plugin before 1.43 does not validate and escape some of its shortcode attributes before out

The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes

The Icon Widget WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outpu

The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attri

The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before

The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputti

The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attr

The Justified Gallery WordPress plugin before 1.7.1 does not validate and escape one of its shortcode attributes, which

The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow a

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing saniti

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 be

The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before ou

The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes

The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side valid

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin use

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a mali

Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject a

Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attack

Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and ea

isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for ex

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jum

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.