2023

The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically be

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smp7, wp.Insider S

with only one user interaction(download a malicious config), attackers can gain full command execution on the victim sys

Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute ar

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitr

Deserialization of Untrusted Data vulnerability in Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD) #wpsc.This

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 4

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Mast

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Repo

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Produc

A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memor

The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate pa

IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which coul

The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated

The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6

The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient ch

Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credenti

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attack

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file.

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative right

An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthentica

The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbit

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop)

gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affec

A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an

A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker

The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the f

A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerabili

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific reque

Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthentic

An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information

Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not

Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/downloa

XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-

An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior

Server-Side Request Forgery (SSRF) vulnerability in Elegant Digital Solutions CommentLuv.This issue affects CommentLuv:

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifie