2023

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, macOS Ventura 13.6, macOS Sono

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. An app may be ab

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10,

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonom

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. Safari

In WS_FTP Server version prior to 8.8.2, an unauthenticated user could enumerate files under the 'WebServiceHost' d

In WS_FTP Server version prior to 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery

SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may disclos

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watch

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauth

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS So

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS

Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied a

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result i

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passw

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.3 vers

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Webvitaly Sitekit plugin <= 1.3 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abel Ruiz GuruWalk Affiliates plugin <= 1.0.0 versions

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugi

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure

A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows atta

A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to ste

szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain t

Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary co

Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrar

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comme

Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arb

Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including “%s” (from

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be u

A flaw was found in vringh_kiov_advance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel.

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker coul

The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of

The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For

The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings,

The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before

This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowi

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputti

Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via

The Popup Builder WordPress plugin before 4.2.0 does not sanitise and escape some of its settings, which could allow hig

A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft Ima

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privi

Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbit

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the