2023

SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical applica

Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment

This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attac

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, m

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventur

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, ma

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, iOS 16.5 and iPadOS 1

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ven

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit t

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Af

A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vu

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged rem

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A r

A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an

Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticate

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to s

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use tran

Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manip

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an admin

Control characters were not removed when exporting user feedback content. This allowed attackers to include unexpected c

Default permissions for a properties file were too permissive. Local system users could read potentially sensitive infor

A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolut

A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected

The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. T

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vu

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault

Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use loc

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to version 1.13.4, when

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is unini

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improp

Microsoft Power Apps Spoofing Vulnerability

A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #

A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown func

A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an u

A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of

A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown co

A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This af

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A m

Windows Snipping Tool Information Disclosure Vulnerability

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the con

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All vers