The SAML SSO addon in JFrog Artifactory version 6.5.9 does not properly validate the XML signature in the SAMLResponse field send to the URL /webapp/saml/loginResponse. An attacker can use this…

There is an issue in VBScript in the VbsErase function. In some cases, VbsErase fails to clear the argument variable properly, which can trivially lead to crafting a variable with…

Microsoft Edge suffers from a Flash click2play bypass with CObjectElement::FinalCreateObject.

PHP MySQLi Database Class version 2.9.2 which is from joshcam suffers from a remote SQL injection vulnerability.

CSZ CMS version 1.2.1 suffers from an arbitrary file upload vulnerability.

WordPress version 5.0.4 with FormCraft plugin version 2.0 suffers from a cross site request forgery vulnerability that can be leveraged to perform a shell upload.

WinMPG Video Convert versions 9.3.5 and below suffer from a local denial of service vulnerability.

WinAVI iPod/3GP/MP4/PSP Converter version 4.4.2 suffers from a local denial of service vulnerability.

TheCarProject version 2 suffers from a remote SQL injection vulnerability.

Gitea versions 1.7.0 through 1.7.3 suffer from a stored html injection vulnerability.