2023

In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects

A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, h

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in So

A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect version

Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untr

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a dif

The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform

Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN`

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse functio

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fa

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse functio

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulne

Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3

Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading t

Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings chang

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Cross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manag

Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <=

Cross-Site Request Forgery (CSRF) vulnerability in Mercado Pago Mercado Pago payments for WooCommerce plugin <= 6.3.1.

Cross-Site Request Forgery (CSRF) vulnerability in StandaloneTech TeraWallet – For WooCommerce plugin <= 1.3.24 leading

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 lea

Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leadin

Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registrat

Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0.

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializ

A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classif

IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service usin

A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored

An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful e

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of t

A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command lin

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitat

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation o

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrar

A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote at

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the D

A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and

Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to ac

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling threa