2023

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting fr

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which send

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker t

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that cau

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue aff

A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This

A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a cra

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when buildi

A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown proces

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploi

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter u

A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and in

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the

Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the ren

Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convi

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to

Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker w

Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker t

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to

Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convin

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker wh

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr