2023

In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with

In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi

In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of

In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of pri

In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclos

In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation o

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Ro

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability

An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In Fort

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thro

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector pa

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an im

A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the

A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unkn

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vul

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypa

Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-ori

Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially explo

Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass X

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attac

Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the RES

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could

The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could

The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in

The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before out

The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high priv

The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, whi

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content

The Login with Cognito WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could all

The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow

The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg

The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, wh

The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as

The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs

The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, w

The Team Members WordPress plugin before 5.2.1 does not sanitize and escapes some of its settings, which could allow hig

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the fil

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord cha

A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this