2023

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affect

A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x pr

The Leyka plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.30.7

The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl

The WP User Control plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including

The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions u

The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.

A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a

The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute fi

Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfus

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to

Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to

Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof secur

Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass

Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote a

Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof securit

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker

Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior, the implementation of `BaseUs

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local priv

A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself throu

SOFARPC is a Java RPC framework. Versions prior to 5.11.0 are vulnerable to remote command execution. Through a carefull

Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page mod

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Fal

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injec

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network acces

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to c

Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of p

A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and

A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry

User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed

A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.

An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could

Microsoft Office Spoofing Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Windows Defender Attack Surface Reduction Security Feature Bypass

DHCP Server Service Denial of Service Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

Azure DevOps Server Remote Code Execution Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability