2023

Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitizati

In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by th

Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when access

The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized

The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before gett

External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, inv

Attackers with access to user accounts can inject arbitrary control characters to SIEVE mail-filter rules. This could be

The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not

The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th

An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1

An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 1

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the pri

An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enu

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability t

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoin

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starti

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions start

An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.

An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting fr

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions start

An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrar

Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the descriptio

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS v

Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid,

A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c co

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v

Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow

An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting fr

Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker t

Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a rem

Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate

Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote atta

Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to

Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to pot

Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromise

Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a u

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to e

Use after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker who convinc

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap c

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap c

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The in

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled pac