2023

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Woo Subscriptions.This issue affects Woo S

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Automa

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrawlSpider SEO Ch

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Automa

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper Link

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Square.This issue affects WooC

Deserialization of Untrusted Data vulnerability in Rocketgenius Inc. Gravity Forms.This issue affects Gravity Forms: fro

Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability h

Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro:

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Fli

Deserialization of Untrusted Data vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a thro

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dash

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce GoCardless.This issue affects GoCardless:

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachab

Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authe

Improper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong en

A flaw in the input validation in TOBY-L2 allows a user to execute arbitrary operating system commands using specificall

This vulnerability enables malicious users to read sensitive files on the server.

This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the contex

A successful CSRF attack could force the user to perform state changing requests on the application. If the victim

EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the

An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a vis

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability

An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows att

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Younes JFR. Advanc

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GuardGiant Brute F

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI Ch

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vend

Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in in

Deserialization of Untrusted Data vulnerability in Rajnish Arora Recently Viewed Products.This issue affects Recently Vi

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) i

Deserialization of Untrusted Data vulnerability in Themesflat Themesflat Addons For Elementor.This issue affects Themesf

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerabi

An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. T

When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could acces

A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the se

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege es

A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to a

Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that w

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect Ty

Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence

The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that la

A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. Thi

The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vu

A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox E

Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerabili