2023

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In Cilium clusters where Cili

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several ap

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to

Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause mali

Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability ma

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.

Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availa

Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this

Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successf

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Shari

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versio

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Happy addons Happy Elementor Addons Pro plugin <= 2.8.0 ve

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions.

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 a

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 an

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10.

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14. An app may be able to b

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 1

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17,

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7, w

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, w

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper c

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17, iOS

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps Landing Page Builder plugin <= 1.5.1.2 versi

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in twinpictures, baden03 Collapse-O-Matic plugin <=

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin <= 2.16

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lasso Simple URLs plugin <= 117 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as Image plugin by Pdfcrowd plugin <= 2.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rextheme WP VR plugin <= 8.3.4 versions.

Auth. (contributor) Cross-Site Scripting (XSS) vulnerability in 93digital Typing Effect plugin <= 1.3.6 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jes Madsen Cookies by JM plugin <= 1.0 versions.

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shor

Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege