2023

IBM Security Verify Privilege On-Premise 11.5 could allow an authenticated user to obtain sensitive information or perf

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient s

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability t

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially cr

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a special

IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation

A vulnerability classified as problematic has been found in Halulu simple-download-button-shortcode Plugin 1.0 on WordPr

A vulnerability was found in reciply Plugin up to 1.1.7 on WordPress. It has been rated as critical. This issue affects

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a special

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 202

An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted s

MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user c

Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even wh

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a spec

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic

Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a cra

Discourse is an open source community platform. In affected versions any user can create a topic and add arbitrary custo

Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin p

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 and 11.5 is vulnerable to denial of service with

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic

WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attacke

The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 exposes the full path of a file when putting in a non-existen

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activi

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect W

The Page Builder: Pagelayer WordPress plugin before 1.7.8 doesn't prevent attackers with author privileges and higher fr

The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which co

The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some p

The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores

The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS b

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dan

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url f

The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded

The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could

The Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users s

The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed

The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes

The Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attrib

The Magee Shortcodes WordPress plugin through 2.1.1 does not validate and escape some of its shortcode attributes before

The Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could all

The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post

The Simple Posts Ticker WordPress plugin before 1.1.6 does not validate and escape some of its shortcode attributes befo

The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privil

The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting i

The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes

Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server wa

Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public

The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allo

The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong t