2023

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 1

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions start

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknow

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as proble

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This

A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for se

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not

A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the funct

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for ot

Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enro

Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowi

A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing o

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the

Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits tha

Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a lo

Missing Authorization in GitHub repository hamza417/inure prior to Build95.

JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications. Pr

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.1 has a path traversal vuln

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior

In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to

In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to s

In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissio

In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, du

Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbi

A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affect

A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function ma

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, int

In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lea

In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused depu

In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This

In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy

In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This cou

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local

A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm

A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loa

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCr

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an

A vulnerability classified as problematic has been found in Dragon Path 707GR1 up to 20231022. Affected is an unknown fu

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime en

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user

sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of

A vulnerability, which was classified as problematic, has been found in CodeAstro Internet Banking System 1.0. This issu

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects

A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unkno

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this i

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by thi

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is a