2023

OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability th

HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP r

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to versio

Cross-Site Request Forgery (CSRF) vulnerability in WPSynchro WP Synchro plugin <= 1.9.1 versions.

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6,

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the `com.epam.reportportal:service-ap

OroCommerce is an open-source Business to Business Commerce application. In versions 4.1.0 through 4.1.13, 4.2.0 through

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to pot

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to dow

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retriev

Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources

Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exp

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a s

In JetBrains Ktor before 2.3.5 server certificates were not verified

Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <= 2302 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Peter Butler Timthumb Vulnerability Scanner plugin <= 1.54 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Matias s Shockingly Simple Favicon plugin <= 1.8.2 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Joakim Ling Remove slug from custom post type plugin <= 1.0.3 version

Cross-Site Request Forgery (CSRF) vulnerability in Moriyan Jay WP Site Protector plugin <= 2.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Devnath verma WP Captcha plugin <= 2.0.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin <= 2.23.1 versi

Cross-Site Request Forgery (CSRF) vulnerability in Huseyin Berberoglu WP Hide Pages plugin <= 1.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in NickDuncan Contact Form plugin <= 2.0.10 versions.

A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic

The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the a

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5,

An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5,

An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, a

An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, an

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege wit

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege wit

In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial

In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with n

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure