2023

The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL s

The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-p

The Responsive CSS EDITOR WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it

The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugi

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could all

The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disa

The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Inj

The Accordion & FAQ WordPress plugin before 1.9.9 does not escape various generated URLs, before outputting them in attr

The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-p

The Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allo

The Catalyst Connect Zoho CRM Client Portal WordPress plugin before 2.1.0 does not sanitize and escape a parameter befor

The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with role

Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02.1_SC_UTF8 allows unauthenti

A reflected cross-site scripting (XSS) vulnerability in the zero parameter of dzzoffice 2.02.1_SC_UTF8 allows attackers

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Ap

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foun

Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cro

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site

The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including,

The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on t

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could all

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vul

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a parti

DataEase is an open source data visualization analysis tool to analyze data and gain insight into business trends. In af

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could a

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could a

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could a

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site s

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site s

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated atta

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loca

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loca

An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticate

An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticate

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site s

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site s

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated user

Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated user

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to ex

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to ex

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to c