2023

An issue in Mojoportal v2.7.0.0 allows an unauthenticated attacker to register a new user even if the Allow User Registr

Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Company Info Sett

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows atta

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interc

An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling red

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports

A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause

Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png file.

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access info

Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.0

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12

Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.0

Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to acc

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to ac

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute Java

Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without auth

An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to

Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID.

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Pre

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without u

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardem

Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to g

Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Re

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE a

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attacke

Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2

An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container rem

Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vert

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary

The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users

The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentia

The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a spe

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is p

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Impr

A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown proces

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-r

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated us

Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression de

formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parse

Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template funct

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora i

When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a p

IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable t

IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management

Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page

IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the H