2023

Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerab

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly u

In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memo

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to ca

Authorization Bypass Through User-Controlled Key vulnerability in Usta AYBS allows Authentication Abuse, Authentication

Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may u

Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected:

Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis C

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Li

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Wind

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Ac

Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /a

Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateContr

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arb

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versio

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with edit

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id

JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, pote

JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system.

Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Restrict plugin <= 2.2.4 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions.

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability ma

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.

Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availa

Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successf

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Shari

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versio

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Happy addons Happy Elementor Addons Pro plugin <= 2.8.0 ve

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Everest News Pro theme <= 1.1.7 versions.

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10.

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 1

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, w

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lasso Simple URLs plugin <= 117 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rextheme WP VR plugin <= 8.3.4 versions.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey