2023

Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be down

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sen

When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErro

When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been cre

When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been cr

An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user

A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password

When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a u

Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file use

An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacke

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intellige

A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue

A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects u

A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this

A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by th

A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical.

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Thi

A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability aff

Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of t

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unkno

A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnera

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affe

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnera

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute ar

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affec

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a maliciou

IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused

IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc

IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information

IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM

IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly

matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected vers

IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection

Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 a

Fiber is an Express inspired web framework built in the go language. Versions of gofiber prior to 2.49.2 did not properl

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously craf

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows atta

In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target fu

Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Busines

The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script"

The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <sc

FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerabi