2023

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an int

The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputt

The WP-Table Reloaded WordPress plugin through 1.9.4 does not validate and escapes some of its shortcode attributes befo

The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes be

The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before o

The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating setti

The iPages Flipbook For WordPress plugin through 1.4.6 does not sanitise and escape some of its settings, which could al

The ImageLinks Interactive Image Builder for WordPress plugin through 1.5.3 does not sanitise and escape some of its set

The iPanorama 360 WordPress Virtual Tour Builder plugin through 1.6.29 does not sanitise and escape some of its settings

The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could

The Bg Bible References WordPress plugin through 3.8.14 does not sanitize and escape a parameter before outputting it ba

The WP CSV WordPress plugin through 1.8.0.0 does not sanitize and escape a parameter before outputting it back in the pa

The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise and escape a parameter before outputting

The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which c

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it bac

The Multi Step Form WordPress plugin before 1.7.8 does not sanitise and escape some of its form fields, which could allo

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a te

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a te

The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could

An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.

The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its

The 404 to Start WordPress plugin through 1.6.1 does not sanitise and escape some of its settings, which could allow hig

The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which c

The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PH

The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege use

The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress th

A vulnerability classified as critical has been found in CherishSin klattr. This affects an unknown part. The manipulati

A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnera

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.1

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.

An arbitrary code exection vulnerability exists in Linksys WUMC710 Wireless-AC Universal Media Connector with firmware <

A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A st

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted str

A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function g

A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unkno

A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of

A vulnerability was found in lukehutch Gribbit. It has been classified as problematic. Affected is the function messageR

Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability. A local low-

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-pr

Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit t

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privi

Zoom Rooms for macOS clients before version 5.11.3 contain a local privilege escalation vulnerability. A local low-privi

Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used

Path-Traversal in MKP storing in Tribe29 Checkmk <=2.0.0p32 and <= 2.1.0p18 allows an administrator to write mkp files t

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=displa

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped tok

Mercurius is a GraphQL adapter for Fastify. Any users of Mercurius until version 10.5.0 are subjected to a denial of ser

Talk-Android enables users to have video & audio calls through Nextcloud on Android. Due to passcode bypass, an attacker

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with N

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing K