2023

The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-conte

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventur

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, m

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a malicious

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catal

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processi

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion d

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec

In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This cou

In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a lo

In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory

In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l

In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead

In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing

In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remot

In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-expo

In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions

SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place.

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWire

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet fun

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRul

In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the back

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information d

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations

An issue was discovered in Tigergraph Enterprise 3.7.0. The GSQL query language provides users with the ability to write

An issue was discovered in Tigergraph Enterprise 3.7.0. There is unsecured write access to SSH authorized keys file. Any

IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement

The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability.

The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple pl

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information c

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <=

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Cou

Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a den

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when proce

libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in th

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `us

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is

An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zol

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps