RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode

metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

Image Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification

wpchill Image Gallery – Photo Grid & Video Gallery

User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

wpeverest User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin

CC Child Pages <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode

caterhamcomputing CC Child Pages

Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI

Apache Software Foundation Apache Airflow apache airflow

NTLM Hash Exposure Vulnerability

Zohocorp ManageEngine ADManager Plus zohocorp manageengine_admanager_plus +1个

Elasticsearch Improper Authentication

Elastic Elasticsearch elastic elasticsearch

LibreOffice 安全漏洞

The Document Foundation LibreOffice

Kibana Cross-site Scripting via the Integration Package Upload Functionality

Elastic Kibana elastic kibana

FantasticLBP Hotels Server hotelList.php sql injection

FantasticLBP Hotels Server

FantasticLBP Hotels Server OrderList.php sql injection

FantasticLBP Hotels Server

Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow

Shiguangwu sgwbox N3 sgwbox n3_firmware

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation ...

LINE Corporation LINE client for iOS linecorp line

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certifica...

LINE Corporation LINE client for iOS linecorp line

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoof...

LINE Corporation LINE client for iOS linecorp line

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app b...

LINE Corporation LINE client for Android linecorp line

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browse...

LINE Corporation LINE client for Android linecorp line

Shiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow

Shiguangwu sgwbox N3 sgwbox n3_firmware

Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection

Shiguangwu sgwbox N3 sgwbox n3_firmware

WordPress plugin URL Shortify 安全漏洞

Unknown URL Shortify