2023

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting fr

Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Gr

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support

IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be re

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1.

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged

xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session es

Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08.

Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the ev

Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability whic

A vulnerability was found in glb Meetup Tag Extension 0.1 on MediaWiki. It has been rated as problematic. This issue aff

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in nikooo777 ckSurf up to 1.19.2. It has been declared as prob

A vulnerability was found in Doc2k RE-Chat 1.0. It has been classified as problematic. This affects an unknown part of t

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230816. It has been declared as problematic.

A vulnerability, which was classified as problematic, was found in NeoMind Fusion Platform up to 20230731. Affected is a

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration

Silverware Games is a premium social network where people can play games online. When using the Recovery form, a noticea

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerabilit

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If e

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the s

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script conten

Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privilege

A vulnerability was found in Control iD Gerencia Web 1.30 and classified as problematic. Affected by this issue is some

A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerabili

A vulnerability, which was classified as problematic, has been found in tdevs Hyip Rio 2.1. Affected by this issue is so

Missing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via bri

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned

Keystone is an open source headless CMS for Node.js — built with GraphQL and React. When `ui.isAccessAllowed` is set as

A vulnerability was found in phpRecDB 1.3.1. It has been rated as problematic. Affected by this issue is some unknown fu

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.4 and iPadOS 1

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able

In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the c

In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.

A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secu

Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able t

Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may a

Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may al

Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledg

Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticate

Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred whi

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred whi