2023

The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in ifr

The WordPress Amazon S3 Plugin WordPress plugin before 1.6 does not sanitise and escape a parameter before outputting it

The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before di

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attrib

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings p

The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputt

A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an atta

SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges v

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause t

A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse t

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via

An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sal

A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This a

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.

In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source a

In Apache Linkis <=1.3.1, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql

In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy

In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a

In Apache Linkis <=1.3.1, The PublicService module uploads files without restrictions on the path to the uploaded files,

This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-j

A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic. Affected by this issue is the f

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected

A vulnerability was found in Fancy Gallery Plugin 1.5.12 on WordPress. It has been declared as problematic. Affected by

An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by

A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the

A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by thi

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows a

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows a

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows a

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_v

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_func

A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an un

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue aff

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnera

A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected

A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the func

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which

A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issu

A vulnerability has been found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic.

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This v

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Thi

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0

A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by thi

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected i