2023

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local att

A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firep

A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could all

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an un

A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs)

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a direct

A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, lo

A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an

A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker t

A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privi

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbit

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker t

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Softwar

Reflected Cross-Site Scripting (XSS) vulnerability in Blockonomics WordPress Bitcoin Payments – Blockonomics plugin <= 3

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswor

The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Goog

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_wri

An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled param

A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary comm

Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS)

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 ver

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Appl

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <

A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost functio

Command Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain sensitive information via a cr

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4

Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3.

TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plug

Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions.

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to

Reflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW kenteken voertuiginformat

Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin <= 3.5.1.9 versions.

Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unkn

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnera

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService o

A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generato

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This v

A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. T

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Thi

A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical

Grafana is an open-source platform for monitoring and observability.  Grafana had a stored XSS vulnerability in the Gra