2023

The Blog-in-Blog plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.0 via

A vulnerability was found in Simplr Registration Form Plus+ Plugin up to 2.3.4 on WordPress and classified as problemati

A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. A

Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can upd

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attac

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulat

An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any typ

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system

An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with t

An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized be

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted pr

An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-c

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate w

An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the t

An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauth

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote at

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic.

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injectio

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attac

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack b

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of servi

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of pri

An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause code execution and

The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a seve

The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject larg

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the

A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vs

A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob wit

A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes

Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with comment

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device.

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.

IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RS

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a us

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who