2023

The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG image uploads in

The Ultimate Addons for Gutenberg plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to,

The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and inclu

The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi

The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks

The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up

The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing cap

The Funnel Builder plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the a

The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This mak

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and includ

The WP HTML Mail plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 2.9.0.3 due to i

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the

The DELUCKS SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saveSettings() function that h

The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-

The WP HTML Mail plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 2.2.10 due to in

The GDPR Cookie Compliance plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and in

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. Thi

The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions

The User Submitted Posts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio

The Delete All Comments plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.

An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network

In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in th

In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does no

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=upda

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special pa

A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overf

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use caus

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the m

A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashin

PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions startin

Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to uplo

notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry

notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry

notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil

An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Comme

Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A discovered oEmbed or image URL c

Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be pos

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple

Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authe