Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
FreeBSD
HIGH 7.5
In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.…
Payu India Payment Gateway
MEDIUM 5.3
/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuantity=1 para…
Paypal Checkout Payment Gateway
MEDIUM 5.3
cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter Tampering in an amount param…
Kubernetes
HIGH 8.1
The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced.…
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memo…
Nx Os
HIGH 7.5
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crash…
Nx Os
MEDIUM 6.5
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow a…
Nx Os
HIGH 7.5
A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart…
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device…
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device…
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are establish…
Sell Downloads
HIGH 7.5
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
Feed Them Social
CRITICAL 9.8
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.
Link Log
HIGH 7.5
The link-log plugin before 2.0 for WordPress has HTTP Response Splitting.
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic.
Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image.
Santuario Xml Security For Java
MEDIUM 5.5
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static poo…
Pan Os
CRITICAL 9.8
A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access…
Slidedeck 2
CRITICAL 9.8
The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion.
Wp Support Plus Responsive Ticket System
CRITICAL 9.8
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
Apm Agent
HIGH 7.2
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can cont…
Ad Inserter
HIGH 8.8
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution.
Shortcodes Ultimate
CRITICAL 9.8
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
Wp Payeezy Pay
CRITICAL 9.8
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
Memphis Documents Library
CRITICAL 9.8
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion.
Memphis Documents Library
CRITICAL 9.8
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion.
Ninja Forms
MEDIUM 6.1
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.
Ninja Forms
HIGH 7.5
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
Ninja Forms
CRITICAL 9.1
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
Google Analyticator
MEDIUM 6.1
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.