2023

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could all

Improper Access Control in GitHub repository microweber/microweber prior to 2.0.

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, whi

XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-m

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noope

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft OneNote Spoofing Vulnerability

Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via th

Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can sen

The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow hi

The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could a

The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in

The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing us

The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could all

The WP Discord Invite WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow

The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores a

The Simple Table Manager WordPress plugin through 1.5.6 does not sanitise and escape some of its settings, which could a

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which coul

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key enc

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process u

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process

Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being i

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a Use

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back butt

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions start

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 1

Cross-Site Request Forgery (CSRF) vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin <= 2.2.11 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <= 1.5.11 versio

Cross-Site Request Forgery (CSRF) vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin <= 1.5 ver

Cross-Site Request Forgery (CSRF) vulnerability in Alter plugin <= 1.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in EasyRecipe plugin <= 3.5.3251 versions.

Cross-Site Request Forgery (CSRF) vulnerability in TheFreeWindows Auto Limit Posts Reloaded plugin <= 2.5 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha p

Cross-Site Request Forgery (CSRF) vulnerability in Serena Villa Auto Excerpt everywhere plugin <= 1.5 versions.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions start

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic m

Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious no

Cross-Site Request Forgery (CSRF) vulnerability in Djo Original texts Yandex WebMaster plugin <= 1.18 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Cont

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yakir Sitbon, Ariel Klikstein Linker plugin <= 1.2.1 v

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plug

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bright Plugins Pre-Orders for WooCommerce plugin