2023

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox

A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the han

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbi

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.4

The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than w

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read man

Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the ch

Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerabi

Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause u

Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect user

Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticate

Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit openin

The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER h

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubn

Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. Th

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file

Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to pote

Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Aut

A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary

Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the licen

A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delet

A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code

On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in cl

microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which cont

msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained t

EspoCRM is an Open Source CRM (Customer Relationship Management) software. In affected versions there is Server-Side Req

An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration prope

An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authentic

The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consump

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 net

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially craf

Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime

Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in An

Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.

Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass aut

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass aut

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrar

PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to ac

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to acc

Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read s

Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with sys