2023

The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 1

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be abl

The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2,

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be abl

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPad

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.

The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to d

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.

This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. A

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visitin

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and

The issue was addressed with improved memory handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadO

The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visitin

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious ap

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Successf

There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock scre

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name

WangEditor v5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /dist/index.js.

A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to exec

A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to exec

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in an

The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow hi

The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settin

The GS Insever Portfolio WordPress plugin before 1.4.5 does not validate and escape some of its shortcode attributes bef

The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attribute

The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise and escape a parameter before outputting

The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options

The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes be

The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in

The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attribu

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes

The Embed PDF WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before output

The List Pages Shortcode WordPress plugin before 1.7.6 does not validate and escape some of its shortcode attributes bef

The Wufoo Shortcode WordPress plugin before 1.52 does not validate and escape some of its shortcode attributes before ou

A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view

Part-DB is an open source inventory management system for your electronic components. User input was found not being pro

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic informa

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that