There is an issue in VBScript in the VbsErase function. In some cases, VbsErase fails to clear the argument variable properly, which can trivially lead to crafting a variable with…
Microsoft Edge suffers from a Flash click2play bypass with CObjectElement::FinalCreateObject.
PHP MySQLi Database Class version 2.9.2 which is from joshcam suffers from a remote SQL injection vulnerability.
CSZ CMS version 1.2.1 suffers from an arbitrary file upload vulnerability.
WordPress version 5.0.4 with FormCraft plugin version 2.0 suffers from a cross site request forgery vulnerability that can be leveraged to perform a shell upload.
WinMPG Video Convert versions 9.3.5 and below suffer from a local denial of service vulnerability.
WinAVI iPod/3GP/MP4/PSP Converter version 4.4.2 suffers from a local denial of service vulnerability.
TheCarProject version 2 suffers from a remote SQL injection vulnerability.
Gitea versions 1.7.0 through 1.7.3 suffer from a stored html injection vulnerability.
libseccomp suffers from an issue where there are incorrect compilations of arithmetic comparisons.