2023

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device servi

There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attac

There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command inj

There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock scre

There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to D

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint.

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMSer

Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceSe

Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.

Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInte

Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInt

Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subj

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldp

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Desc

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the user

WangEditor v5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /dist/index.js.

A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to exec

A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to exec

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid par

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the usernam

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in an

The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow hi

The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settin

The GS Insever Portfolio WordPress plugin before 1.4.5 does not validate and escape some of its shortcode attributes bef

The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attribute

The My Sticky Elements WordPress plugin before 2.0.9 does not properly sanitise and escape a parameter before using it i

The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using

The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise and escape a parameter before outputting

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when gen

The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using

The GeoDirectory WordPress plugin before 2.2.24 does not properly sanitise and escape a parameter before using it in a S

The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options

The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes be

The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in

The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attribu

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes

The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before output

The List Pages Shortcode WordPress plugin before 1.7.6 does not validate and escape some of its shortcode attributes bef

The Wufoo Shortcode WordPress plugin before 1.52 does not validate and escape some of its shortcode attributes before ou

The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address o

Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the /api/v4/users/me/teams API e

Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the "Regenerate Invite Id" API en

A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugi

A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view

Part-DB is an open source inventory management system for your electronic components. User input was found not being pro