2023

Cross-Site Request Forgery (CSRF) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.

A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This aff

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent (Li

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

Sensitive information disclosure due to excessive collection of system information. The following products are affected:

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerab

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may g

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be asso

A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (applicatio

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulne

Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected ver

Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS conf

Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI. A lo

Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formul

Dell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in the HTTP interface. A r

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow

A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by se

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a

Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize exte

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a cr

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create publ

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could ha

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incomi

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image fil

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local atta

A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasa

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection

urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or pro

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastr

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditS

Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created accou

Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to W

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, th

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable th

A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by thi

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. T

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugi

IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations cou