2023

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Auth

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no

In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to

A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the func

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element

 A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay.

StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352)

StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79)

7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Synel Terminals - CWE-494: Download of Code Without Integrity Check

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentialit

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vul

A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity v

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice

@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly ini

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentia

Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service v

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted

Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain se

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a cli

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dharmesh Patel Post List With Featured Image plugin <= 1.2

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Chop-Chop Coming Soon Chop Chop plugin <= 2.2.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ShopConstruct plugin <= 1.1.2 versions.

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/l

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixe

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser.

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON str