2023

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for lo

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows

An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of

Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the cod

Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwar

`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. Th

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry

Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro

Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to modify

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious applic

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted fil

In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This co

In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could

In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission che

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deput

In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device featur

In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deput

In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaust

In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec

In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could l

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This c

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options with

In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadc

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets.

Svelecte is a flexible autocomplete/select component written in Svelte. Svelecte item names are rendered as raw HTML wit

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. Th

In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning

In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a miss