2023

A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affe

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected

A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1.0. This vulnerabi

A vulnerability classified as problematic was found in ForU CMS. This vulnerability affects unknown code of the file /ad

A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this is

Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manag

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user

An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting fr

An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.

An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-bet

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up t

The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in vers

The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back

he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned i

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forg

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In Cilium clusters where Cili

Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause mali

Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17, iOS

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app m

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app m

A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Son

The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Mont

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, macO

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS

A lock screen issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. A user may be

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPad

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200,

Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scriptin

Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo att

plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity conten

OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the err

IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts,

M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document craftin

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.

A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration

An issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks one byte of kernel memo

A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Af

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file

A vulnerability was found in KOHA up to 23.05.03. It has been declared as problematic. This vulnerability affects unknow

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the

A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Aff