2023

A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows at

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 t

**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker t

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta

A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x pr

The Leyka plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.30.7

The WP User Control plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including

A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code

The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute fi

Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfus

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to

Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to

Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof secur

Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass

Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote a

Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof securit

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker

Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior, the implementation of `BaseUs

Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page mod

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Fal

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to c

A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and

A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed

A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.

Microsoft Office Spoofing Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Word Information Disclosure Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Microsoft Identity Linux Broker Remote Code Execution Vulnerability

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network.

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical netwo

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect fil

Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.

Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to inject arbitrary web script

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized