Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode

willbontrager Local Syndication

Like-it <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

nikolayyordanov Like-it

CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

sscovil CSV to SortTable

Coil Web Monetization <= 2.0.2 - Cross-Site Request Forgery

interledger Coil Web Monetization

Pie Forms for WP <= 1.6 - Unauthenticated Arbitrary File Upload

genetechproducts Pie Forms — Drag & Drop Form Builder

Multiple Roles per User <= 1.0 - Missing Authorization to Authenticated (Custom+) Privilege Escalation

jemoreto Multiple Roles per User

Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection

premmerce Premmerce Wholesale Pricing for WooCommerce

A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL).

SMCI X13SEDW-F

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library

SMCI MBD-X13SEDW-F

Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S

Mitsubishi Electric Corporation MILCO.S Setting Application Mitsubishi Electric Corporation MILCO.S Setting Application (IR) +2个

VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

kurudrive VK All in One Expansion Unit

VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

kurudrive VK All in One Expansion Unit

A stack buffer overflow vulnerability exists in the Supermicro BMC Web function

SMCI MBD-X13SEDW-F

Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability

SMCI MBD-X13SEDW-F

Post Type Switcher <= 4.0.0 - Insecure Direct Object Reference to Authenticated (Author+) Post Type Change

johnjamesjacoby Post Type Switcher

In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to ...

Google Android Google Android +6个

Gravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload

Gravity Forms Gravity Forms

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker ...

Gallagher T21 Reader

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ...

Gallagher High Sec End of Line Module

Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access t...

Gallagher HBUS Devices