2023

Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api

Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the Doc

For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invali

An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Ed

A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command r

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an a

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

IzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI.

Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via t

Auth. SQL Injection (SQLi) vulnerability in WP-TopBar <= 5.36 versions.

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Youtube shortcode <= 1.8.5 versions.

Auth. Stored Cross-Site Scripting (XSS) in Oi Yandex.Maps for WordPress <= 3.2.7 versions.

The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on t

The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in

A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the ap

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with el

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before out

The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode att

The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which c

The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before out