2023

Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information an

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vul

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter.

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as

The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticate

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrat

aEnrich a+HRD has improper validation for login function. An unauthenticated remote attacker can exploit this vulnerabil

aEnrich a+HRD has insufficient user input validation for specific API parameter. An unauthenticated remote attacker can

aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypa

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become u

Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-ori

Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially explo

Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the r

Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote atta

Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker wh

Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass X

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attac

Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attac

Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out

Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sand

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the RES

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could

The Quote-O-Matic WordPress plugin through 1.0.5 does not properly sanitize and escape a parameter before using it in a

The Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQ

The Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQ

The multimedial images WordPress plugin through 1.0b does not properly sanitize and escape a parameter before using it i

The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL

The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL

The Qe SEO Handyman WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a

The Qe SEO Handyman WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a

The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in

The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before out

The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead t

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow hig

The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user

The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a