2023

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tauhidul Alam Simple Portfolio Gallery plugin <= 0.1 v

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari Accordion – Multiple Accordion or FAQs

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Hero Banner U

Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic o

DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacke

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a

Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review_result.php

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based) via the EN_tyid POST para

Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe serve

SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderS

A cross-site scripting vulnerability (XSS) in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to

An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalat

In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application t

An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starti

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 thr

A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to d

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9

A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS ver

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiN

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 1

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting

An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.

An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.

A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all ve

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and

A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC vers

A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HT

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /ph

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting fr

An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all v

An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting fr

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions star

An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting f

An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was p

An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.

Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitrar

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to co

redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function at /src/header/netdb/mod

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user v

Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging e

Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS co

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.10.2 versio

Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo plugin <= 6.0.2.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GreenTreeLabs Circles Gallery plugin <= 1.0.10 version

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Himanshu Bing Site Verification plugin using Meta Tag