2023

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macO

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, i

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatek

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Bi

This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Mont

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. File

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An a

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5. Processin

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An a

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. A user i

Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable t

Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applicatio

The Web Stories for WordPress plugin supports the WordPress built-in functionality of protecting content with a password

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL para

Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart pl

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a spec

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Branko Borilovic WSB Brands plugin <= 1.1.8 versions.

The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page short

The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outp

The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing

The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to upda

The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow hi

The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the das

The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in att

The Pickup | Delivery | Dine-in date time WordPress plugin through 1.0.9 does not sanitise and escape some of its settin

The WP Login Box WordPress plugin through 2.0.2 does not sanitise and escape some of its settings, which could allow hig

The Custom Post Type List Shortcode WordPress plugin through 1.4.4 does not validate and escape some of its shortcode at

The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcod

The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting

The Post Shortcode WordPress plugin through 2.0.9 does not validate and escape some of its shortcode attributes before o

The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updati

The Membership Database WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back

The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it