2023

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

DataEase is an open source data visualization and analysis tool. When saving a dashboard on the DataEase platform saved

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office dire

Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the fil

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentic

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 version

All versions of the package utilities are vulnerable to Prototype Pollution via the _mix function.

In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks cer

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe comp

Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID

A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown func

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3

A denial-of-service issue was addressed with improved input validation. This issue is fixed in tvOS 16.3.2, iOS 16.3.1 a

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, m

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS M

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. A

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 1

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPa

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13. An app ma

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able t

This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16. An app may

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11

A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An ap

This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app m

An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted

There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnera

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device servi

There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to D

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint.

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMSer

Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceSe

Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subj

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldp

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Desc

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the user

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.

The My Sticky Elements WordPress plugin before 2.0.9 does not properly sanitise and escape a parameter before using it i

The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using