2023

Cross-Site Request Forgery (CSRF) vulnerability in YAS Global Team Make Paths Relative allows Cross Site Request Forgery

Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole WP-CopyProtect [Protect your blog posts] plugin <= 3.1.0

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant

IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a se

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected i

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cr

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cr

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cr

Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long us

Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that affects m

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, mid

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tag

Blind SQL injection vulnerability in the Conacwin 3.7.1.2 web interface, the exploitation of which could allow a local a

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensiti

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could al

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote atta

Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a re

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if conf

Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to cha

A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostna

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerabili

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploit

Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole WP-CopyProtect [Protect your blog posts] plugin <= 3.1.0

Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a

A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does

Cross-Site Request Forgery (CSRF) vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Re

Cross-Site Request Forgery (CSRF) vulnerability in Saphali Saphali Woocommerce Lite plugin <= 1.8.13 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin <= 2.0.0 ver

A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an inse

Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant mes

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no spe

Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input

On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro,

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute java

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access b

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive

Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attac

Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial numbe

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to ins

Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi an

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch pr