RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to `RestRequest.AddHeader` (the header value) is vulnerable to CRLF injection. The same applies to `RestRequest.AddOrUpdateHeader` and `RestClient.AddDefaultHeader`. The way HTTP headers are added to a request is via the `H...
AFFECTED_PRODUCTS:
Restsharp Restsharp
An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected.
This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event (a tamper reset) occurs. This impacts Series 2 HSE-SVH...
unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.
AFFECTED_PRODUCTS:
Unmark Unmark
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.
AFFECTED_PRODUCTS:
Organizr Organizr
Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.
AFFECTED_PRODUCTS:
Organizr Organizr
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.
AFFECTED_PRODUCTS:
Organizr Organizr
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php
AFFECTED_PRODUCTS:
Sourcefabric Phoniebox
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php
AFFECTED_PRODUCTS:
Sourcefabric Phoniebox
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php
AFFECTED_PRODUCTS:
Sourcefabric Phoniebox
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php
AFFECTED_PRODUCTS:
Sourcefabric Phoniebox
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php
AFFECTED_PRODUCTS:
Sourcefabric Phoniebox
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php
AFFECTED_PRODUCTS:
Sourcefabric Phoniebox
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.
AFFECTED_PRODUCTS:
Phpipam Phpipam
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/getContent.php
AFFECTED_PRODUCTS:
Baijunyao Bjyadmin
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/imageUp.php
AFFECTED_PRODUCTS:
Baijunyao Bjyadmin
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php
AFFECTED_PRODUCTS:
Jpatokal Openflights
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php
AFFECTED_PRODUCTS:
Jpatokal Openflights
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php
AFFECTED_PRODUCTS:
Jpatokal Openflights
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/trip.php
AFFECTED_PRODUCTS:
Jpatokal Openflights
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
AFFECTED_PRODUCTS:
Acronis Snap Deploy,
Acronis Snap Deploy
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
AFFECTED_PRODUCTS:
Acronis Snap Deploy,
Acronis Snap Deploy
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
AFFECTED_PRODUCTS:
Acronis Snap Deploy,
Acronis Snap Deploy
Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.
AFFECTED_PRODUCTS:
Dineshkarki Wp Armour Extended
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Magic Post Thumbnail allows Reflected XSS.This issue affects Magic Post Thumbnail: from n/a through 5.2.9.
AFFECTED_PRODUCTS:
Magic-Post-Thumbnail Magic Post Thumbnail
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.4.
AFFECTED_PRODUCTS:
Jegstudio Gutenverse
Serilog before v2.1.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as a value of X-Forwarded-For or Client-Ip headers while performing HTTP requests.
AFFECTED_PRODUCTS:
Serilog-Contrib Serilog Enrichers Clientinfo
A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
AFFECTED_PRODUCTS:
Vtiger Vtiger Crm
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
AFFECTED_PRODUCTS:
Vtiger Vtiger Crm
A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
AFFECTED_PRODUCTS:
Vtiger Vtiger Crm
An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.
AFFECTED_PRODUCTS:
Vtiger Vtiger Crm
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
AFFECTED_PRODUCTS:
Dedebiz Dedebiz
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
AFFECTED_PRODUCTS:
Dedebiz Dedebiz
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5.
AFFECTED_PRODUCTS:
Dsgvo-For-Wp Dsgvo All In One For Wp
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS Style Editor: from n/a through 7.6.1.
AFFECTED_PRODUCTS:
Waspthemes Yellowpencil
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Toggle Show/Hide: from n/a through 2.1.3.
AFFECTED_PRODUCTS:
Azurecurve Toggle Show\/hide
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Page Builder Addons Web and WooCommerce Addons for WPBakery Builder allows Stored XSS.This issue affects Web and WooCommerce Addons for WPBakery Builder: from n/a through 1.4.6.
AFFECTED_PRODUCTS:
Pagebuilderaddons Web And Woocommerce Addons For Wpbakery Builder
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a through 1.0.5.
AFFECTED_PRODUCTS:
Gianni-Porto Intothedark
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Classic Addons Classic Addons – WPBakery Page Builder allows Stored XSS.This issue affects Classic Addons – WPBakery Page Builder: from n/a through 3.0.
AFFECTED_PRODUCTS:
Wpbakery Page Builder
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.
AFFECTED_PRODUCTS:
Cryoutcreations Esotera
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2.
AFFECTED_PRODUCTS:
Cryoutcreations Tempera
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nextbricks Brickscore allows Stored XSS.This issue affects Brickscore: from n/a through 1.4.2.5.
AFFECTED_PRODUCTS:
Nextbricks Bricksore
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic GHActivity allows Stored XSS.This issue affects GHActivity: from n/a through 2.0.0-alpha.
AFFECTED_PRODUCTS:
Automattic Ghacitivity,
Automattic Ghactivity
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.
AFFECTED_PRODUCTS:
Dineshkarki Wp Armour
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes SKT Blocks – Gutenberg based Page Builder allows Stored XSS.This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 1.5.
AFFECTED_PRODUCTS:
Sktthemes Skt Blocks
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8.
AFFECTED_PRODUCTS:
Wpdeveloper Embedpress
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7.
AFFECTED_PRODUCTS:
Wpdelicious Wp Delicious
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0.5.
AFFECTED_PRODUCTS:
Robfelty Collapsing Archives
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Reflected XSS.This issue affects Beaver Builder: from n/a through 2.8.3.2.
AFFECTED_PRODUCTS:
Fastlinemedia Beaver Builder
zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~1` is generated as an unsigned 64 bits number (`2^64-1`). This number is zero-extended to 256 bits on EraVM target while it should have been...
AFFECTED_PRODUCTS:
Matter-Labs Zksolc
Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Collabora Online it was possible to inject JavaScript via url encoded values in links contained in documents. Since the Android JavaScript interface allows access t...
AFFECTED_PRODUCTS:
Collabora Online