2023

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sen

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 1

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, wa

The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, wa

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, wa

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadO

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.1 and

An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issu

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 1

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 1

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Montere

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 1

When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflec

Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c

When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Me

The Reusable Text Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text-blocks' shortcode i

The Very Simple Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vsgmap'

The Live Chat with Facebook Messenger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscur

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which c

A website could have obscured the full screen notification by using the file open dialog. This could have led to user co

A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to c

An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document

Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a serv

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to

A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit th

The WP Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to,

The Delete Me plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'plugin_delete_me' shortcode in vers

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' s

The Advanced Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'advMenu' shortcode in ve

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attack

An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted AP

Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided an

Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a sto

Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whet

Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided a

Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when chec

Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which a

Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, pot

A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attacke

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes,