2023

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member

A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as pr

A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management S

The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13.

The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12.

The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.

The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and includin

The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and includin

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and c

The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technolo

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technolo

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Cross-Site Request Forgery in version

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in v

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group modul

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm

Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialize

Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.

A vulnerability classified as critical was found in hgzojer Vocable Trainer up to 1.3.0 on Android. This vulnerability a

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to m

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string,

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, com

The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!=

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and pe

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resour

A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl functi

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidde

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks bei

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Su

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability.

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functi