2023

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow

Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. V

A user with a compromised configuration can start an unsigned binary as a service.

An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary

Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the langua

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privi

A user with non-Admin access can change a configuration file on the client to modify the Server URL.

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reus

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.

Certain Lexmark devices through 2023-02-19 have an Integer Overflow.

Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.

Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5,

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 a

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with phy

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, iOS 16.2 and iPad

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16.

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventu

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.1. An ap

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2

A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress. T

An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12.

An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host vi

delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the lo

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects u

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2

The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the ima

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticate

Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vuln

The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writ

The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing a

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg WordPress plugin before 2.7.9.

The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not exec

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which co

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before output

The Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high

The Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-pri

The Auto Rename Media On Upload WordPress plugin before 1.1.0 does not sanitise and escape some of its settings, which c