2022

GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD.

tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.

Missing Access Control vulnerability in PHP Crafts Accommodation System plugin <= 1.0.1 at WordPress.

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin <= 1.5 at WordPress.

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin <= 1.0.12 at WordPress.

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer pa

GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations in vers

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerabilit

Use After Free in GitHub repository vim/vim prior to 9.0.0389.

SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system o

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to

CircuitVerse is an open-source platform which allows users to construct digital logic circuits online. A remote code exe

WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their p

Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows at

sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication serv

An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has al

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for i

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection v

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection v

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side reques

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in v

The uContext for Amazon plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in vers

The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in vers

The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via th

The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' val

The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'file[package_dir]

The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input

The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, an

The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion in versions up to, and including 3.2.

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4.

An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 conn

In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially cr

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only p

Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attac

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attac