2023

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watch

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unaut

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privilege

SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may disclos

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to exe

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watch

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed

A lock screen issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. A user may be

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauth

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPad

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS So

An issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH session to gateways is vuln

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MRV Tech Logging A

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access

A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app

This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 1

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS

Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied a

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result i

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.7 versions.

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passw

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.3 vers

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versio

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated at

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Webvitaly Sitekit plugin <= 1.3 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abel Ruiz GuruWalk Affiliates plugin <= 1.0.0 versions

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugi

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure

A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token fro

Stability-related vulnerability in the binder background management and control module. Successful exploitation of this

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnera

Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.

A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows atta

A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an ad

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, a

In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sen