2023

In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv

In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv

In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclos

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In mtee, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privi

In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code exe

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege

Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote atta

Budibase is a low code platform for creating internal tools, workflows, and admin panels. Versions prior to 2.4.3 (07 Ma

The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js`

Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who suc

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost

Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Ba

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can c

Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large num

HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading t

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing

Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referr

The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versio

The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lock logging feature

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugi

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeat Glossary plugin <= 2.1.27 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builder

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.1 versions. Ne

Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface.  When the device can be ac

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions.

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Af

Cross-Site Request Forgery (CSRF) vulnerability in AdTribes.Io Product Feed PRO for WooCommerce plugin <= 12.4.4 version

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kerry Kline BNE Testimonials plugin <= 2.0.7 ver

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP For The Win bbPress Voting plugin <= 2.1.11.0 versi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.6

Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WA

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt

In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the H

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions