2023

An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able

A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another use

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing at

A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-spec

Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, r

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXML

A vulnerability classified as problematic was found in Gira HomeServer up to 4.12.0.220829 beta. This vulnerability affe

CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthentica

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code executio

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.759

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac paramete

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions.

An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted

An issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privilege

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NetReviews SAS Verified Reviews (Avis Vérifiés) plugin

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Denis WPJAM Basic plugin <= 6.2.1 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Arconix Shortcodes plugin <= 2.1

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Richard Leishman t/a Webforward Mail Subscribe L

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPmanage Uji Popup plugin <= 1.4.3 versions.

The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and inc

The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.2.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Formilla Live Chat by Formilla plugin <= 1.3 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bruno "Aesqe" Babic File Gallery plugin <= 1.8.5

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI componen

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized rea

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the sea

The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter i

D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,

Greenplum Database (GPDB) is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Da

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capab

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image

In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to registe

In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below syste

In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could l

In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services d

In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaust

In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error i

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local esc

In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to loca

In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure w

In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to

In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error

In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resour

In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for th