2023

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a funct

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple at

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP fil

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated priv

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker wi

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker w

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal service

An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permis

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to caus

The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of

The WP Social Widget WordPress plugin before 2.2.4 does not validate and escape some of its shortcode attributes before

The WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputti

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could a

The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ens

The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before out

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes be

The CPT Bootstrap Carousel WordPress plugin through 1.12 does not validate and escape some of its shortcode attributes b

The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of

The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes befor

The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (

The Blog Designer WordPress plugin before 2.4.1 does not validate and escape one of its shortcode attributes, which coul

The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes,

Themify Shortcodes WordPress plugin before 2.0.8 does not validate and escape one of its shortcode attributes, which cou

The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, wh

The CC Child Pages WordPress plugin before 1.43 does not validate and escape some of its shortcode attributes before out

The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes

The Icon Widget WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outpu

The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attri

The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before

The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow

The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputti

The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attr

The Justified Gallery WordPress plugin before 1.7.1 does not validate and escape one of its shortcode attributes, which

The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow a

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing saniti

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 be

The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before ou

The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthe

The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

AMI Megarac Password reset interception via API

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side valid