2023

The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sfp-page-plugin' shor

The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys

The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6

The Telephone Number Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'telnumli

The WP MapIt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_mapit' shortcode in

The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6

The ImageMapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'imagemap' shortcode in versions u

The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the

Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin. This issue affects Apache

Allura Discussion and Allura Forum importing does not restrict URL values specified in attachments. Project administrato

The Ziteboard Online Whiteboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ziteboard' sh

Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass auth

Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sa

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 i

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prio

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account pr

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.

Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows att

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access u

Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows loc

An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to rea

Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execut

Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the netw

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass r

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi an

Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitra

Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local

Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local a

Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to exe

A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqui

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqui

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a usernam

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Memory corruption while processing audio effects.

Information disclosure in WLAN HAL while handling command through WMI interfaces.

Information disclosure in WLAN HAL when reception status handler is called.

Information disclosure in WLAN HAL while handling the WMI state info command.

Information disclosure in IOE Firmware while handling WMI command.

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Information Disclosure in WLAN Host when processing WMI event command.