2023

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted

Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. Thi

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This

In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic e

In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead

In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustio

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

DataEase is an open source data visualization and analysis tool. When saving a dashboard on the DataEase platform saved

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office dire

Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the fil

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentic

Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 can lead to th

Cross-Site Request Forgery (CSRF) vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin <= 1.4.10 lea

There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation

Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 l

Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 version

Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.

Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 ver

The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in version

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on t

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability ch

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on t

All versions of the package utilities are vulnerable to Prototype Pollution via the _mix function.

In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks cer

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 s

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe comp

Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Ad

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.

A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown func

A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Geo

Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerabil

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3

A denial-of-service issue was addressed with improved input validation. This issue is fixed in tvOS 16.3.2, iOS 16.3.1 a

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, m

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2,

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS M

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS