WordPress Quality theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3.

Adobe Connect | Incorrect Authorization (CWE-863)

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction.

WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.

WordPress Strong Testimonials plugin <= 3.3.17 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Chill Strong Testimonials strong-testimonials allows Code Injection.This issue affects Strong Testimonials: from n/a through 3.3.17.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Git

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository

Microsoft Teams for Android Spoofing Vulnerability

Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

Microsoft SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Azure DevOps Server Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

GitHub Copilot for Jetbrains Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Microsoft SQL Server Elevation of Privilege Vulnerability

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

Windows Program Compatibility Assistant Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

Windows Task Scheduler Elevation of Privilege Vulnerability

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Microsoft.Data.SqlClient Information Disclosure Vulnerability

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.

Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

This is rejected.

This is rejected.