2023

Cross-Site Request Forgery (CSRF) vulnerability in YAS Global Team Make Paths Relative allows Cross Site Request Forgery

Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole WP-CopyProtect [Protect your blog posts] plugin <= 3.1.0

An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cr

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cr

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cr

Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that affects m

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, mid

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tag

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could al

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if conf

Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole WP-CopyProtect [Protect your blog posts] plugin <= 3.1.0

A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does

Cross-Site Request Forgery (CSRF) vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Re

Cross-Site Request Forgery (CSRF) vulnerability in Saphali Saphali Woocommerce Lite plugin <= 1.8.13 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin <= 2.0.0 ver

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant mes

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no spe

On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro,

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute java

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access b

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive

Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial numbe

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to ins

Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi an

The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions

The Blog Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'AWL-BlogFilter' shortcode in vers

The WP Mail SMTP Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code

IBM FileNet Content Manager 5.5.8, 5.5.10, and 5.5.11 is vulnerable to cross-site scripting. This vulnerability allows u

IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclo

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.

SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management comp

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component.

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulne

A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates fro

A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bou

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the sys

This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter wi

This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page de

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain

Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communication

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to t

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability.

Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions.