2023

An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain

An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to ga

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input valida

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attac

An IBM UrbanCode Deploy Agent 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 installed as a Windows service in a non-stand

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to caus

Cross-Site Request Forgery (CSRF) vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advance

Cross-Site Request Forgery (CSRF) vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through

IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a

A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A us

Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for Salesforce and Contact Fo

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magazine3 Core Web Vitals & PageSpeed Booster.This

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordP

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Swapnil V. Patil Login and Logout Redirect.This iss

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Search.This is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM,

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBook

Deserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Bu

Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affe

Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements,

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions list

Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users

Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler.

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displaye

A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow unt

In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subs

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking del

`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to wr

The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to esca

When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary.

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially all

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects th

A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow fo

Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive in

Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive

Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import data

The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortc

The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML inje

A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the fi

A vulnerability was found in Corveda PHPSandbox 1.3.4 and classified as critical. Affected by this issue is some unknown

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Perfect Images (Manage Image Size