Design/Logic Flaw

OpenEMR v6.0.0 was discovered to contain an incorrect access control issue...

Cross site scripting

The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS...

Information disclosure

A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the toString method on an object even if not allowed by the security policy in place...

Null pointer dereference

An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

Command injection

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 21 of 46...