2022

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4.

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authen

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authen

In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php w

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filter

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnera

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnera

Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0.

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capabl

There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.

A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers

The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privil

The WP Zillow Review Slider WordPress plugin before 2.4 does not escape a settings, which could allow high privilege use

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in

The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own

The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction

The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow

The CaPa Protect WordPress plugin through 0.5.8.2 does not have CSRF check in place when updating its settings, which co

The WPlite WordPress plugin through 1.3.1 does not have CSRF check in place when updating its settings, which could allo

The Amazon Einzeltitellinks WordPress plugin through 1.3.3 does not have CSRF check in place when updating its settings,

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which

The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, w

The PDF24 Article To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, wh

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which cou

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow

Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allo

The Multi-page Toolkit WordPress plugin through 2.6 does not have CSRF check in place when updating its settings, which

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact fo

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its sett

The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing

The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMO

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which

The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users,

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parame

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, w

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text

The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of lon

The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is ac

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerabili

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17.

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inj

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privilege

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API func

NHI’s health insurance web service component has insufficient validation for input string length, which can result in he

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function