2023

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2. An app may be able to access use

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, watchOS 10.2, iOS 17.2

The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, mac

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2, macOS Ve

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 a

An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user,

SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into We

Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated at

A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated att

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, the application uses WebSocket (with

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login pass

The LinkedCustomFields plugin for MantisBT allows users to link values between two custom fields, creating linked drop-d

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the fi

MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a limited file wr

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component selec

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admi

A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or

The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could all

The WP Not Login Hide (WPNLH) WordPress plugin through 1.0 does not sanitise and escape some of its settings, which coul

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrat

The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow h

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the p

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the pa

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Di

MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side req

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.9

A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an e

A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. T

A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by

A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerabil

The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows att

A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affec

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. It has be

An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge bas

An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to exte

An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This

Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by ex

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problemat

A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issu

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problema

sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an inform

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Pr

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obf