2023

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisc

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specify

The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote inje

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction o

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a

In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev retur

In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table r

In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expect

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an of_find_device_by_node reference aft

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This aff

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affecte

GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data b

This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, whi

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/as

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 co

An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConf

Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can e

Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted

Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javas

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET pa

Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could pot

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted

In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic e

In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead

In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustio

Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 can lead to th

Cross-Site Request Forgery (CSRF) vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin <= 1.4.10 lea

Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 l

Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as

Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.

Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 ver

The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in version

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on t

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability ch

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on t

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 s

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Ad

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.

A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Geo

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura