WP Job Portal <= 2.3.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

tmus Simple Nivo Slider

Vimeo SimpleGallery <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification

stiand Vimeo SimpleGallery

Flow-Flow Social Feed Stream 3.0.0 - 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via flow_flow_social_auth AJAX action

looks_awesome Flow-Flow Social Feed Stream

BMLT WordPress Plugin <= 3.11.4 - Cross-Site Request Forgery to Settings Creation and Deletion

magblogapi BMLT WordPress Plugin

A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM

ASUSTOR ADM asustor data_master

High Level Synthesis Compiler Security Advisory

Altera High Level Synthesis Compiler intel high_level_synthesis_compiler

ASUSTOR ADM 安全漏洞

ASUSTOR ADM asustor data_master

High Level Synthesis Compiler Security Advisory

Altera High Level Synthesis Compiler intel high_level_synthesis_compiler

LT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter

cvedovini LT Unleashed

LJUsers <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute

jenyay LJUsers

Quartus Prime Standard Security Advisory

Altera Quartus Prime Standard intel quartus_prime

H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)

Insyde Software InsydeH2O

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a b...

malwarebytes malwarebytes

Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/pre...

nextcloud nextcloud_server

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allow...

cloudlinux ai-bolit

Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute ar...

mineadmin mineadmin

Plesk 18.0 has Incorrect Access Control.

plesk plesk

jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allow...

jishenghua jsherp

RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit ...

ruoyi ruoyi