2023

The Weaver Xtreme Theme Support WordPress plugin before 6.2.7 does not validate and escape some of its shortcode attribu

huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (

The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 th

The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series fi

rails-routes-to-json v1.0.0 was discovered to contain a remote code execution (RCE) vulnerability via the child_process

broccoli-compass v0.2.4 was discovered to contain a remote code execution (RCE) vulnerability via the child_process func

SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privilege

An issue was discovered in Telindus Apsal 3.14.2022.235 b. The consultation permission is insecure.

An issue was discovered in Telindus Apsal 3.14.2022.235 b. Unauthorized actions that could modify the application behavi

An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 t

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affect

A vulnerability was found in Kau-Boy Backend Localization Plugin up to 1.6.1 on WordPress. It has been rated as problema

Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In

Kiwi TCMS is an open source test management system. In versions of Kiwi TCMS prior to 12.2, users were able to update th

lorawan-stack is an open source LoRaWAN network server. Prior to version 3.24.1, an open redirect exists on the login pa

An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard

An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Se

A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32,

The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00

A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50

A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 th

A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shareaholic Similar Posts plugin <= 3.1.6 versions.

An authenticated user with specific data permissions could access database connections stored passwords by requesting a

Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in cl

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered th

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc

In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability.

In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability.

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability.

In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability.

In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability.

In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability.

In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.

Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice

Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in

Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.

Ribose RNP before 0.16.3 may hang when the input is malformed.

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Plugins Pro WP Super Popup plugin <= 1.1.2 versions

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 vers

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.

Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.

Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function.