2023

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could perm

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via t

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, ac

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected

Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value fro

Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php.

An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a r

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbit

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI throu

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affec

A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affec

The WP Activity Log for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0. T

The WP Activity Log Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the

gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC se

When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused a

There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implement

MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not inc

A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large v

An issue was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. When using Oracle Advanced

The Brizy Page Builder plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.4.1

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8

A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affec

A vulnerability, which was classified as critical, was found in SourceCodester Lost and Found Information System 1.0. Af

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Stored Cross-Site Script

The Draw Attention plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versio

The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order par

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based

The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of d

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of d

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of d

The Easy Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,

The Active Directory Integration plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and orde

The Advanced Woo Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version

The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modif