2023

The Feeds for YouTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 all

A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attacker

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers

A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execut

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users run

netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the a

The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with n

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux

A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-S

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lea

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for

A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to insta

A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticat

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR

A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an una

A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execu

An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacke

A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) S

A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used

NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects.

NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthentic

Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who man

A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an att

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface

An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr

A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows at

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiP

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 t

Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances,

**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker t