2023

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar i

Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been ide

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). I

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted header

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffe

The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could

The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments wh

The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimite

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a

The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which

A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input p

github.com/crewjam/saml is a saml library for the go language. In affected versions the package does not validate the AC

An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attac

silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a re

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack ove

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allo

Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP server

The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS base

The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX actio

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apac

The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could a

NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection fo

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.

IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulner

A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game s

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.

IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled reso

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.

An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to o

All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt(

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was

Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.

Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul

A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa

A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthoriz

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with per

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attacke

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allo

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc functi