2023

Information disclosure in WLAN HAL while handling the WMI state info command.

Information disclosure in IOE Firmware while handling WMI command.

Cryptographic issue in HLOS during key management.

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Information Disclosure in WLAN Host when processing WMI event command.

Memory corruption in TZ Secure OS while loading an app ELF.

Memory Corruption in Core due to secure memory access by user while loading modem image.

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

Memory Corruption in Core during syscall for Sectools Fuse comparison feature.

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an u

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary

The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could all

Improper Access Control in GitHub repository microweber/microweber prior to 2.0.

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VP

Macvim is a text editor for MacOS. Prior to version 178, Macvim makes use of an insecure interprocess communication (IPC

Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, whi

XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-m

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noope

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft OneNote Spoofing Vulnerability

Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to exe

Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via th

Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can sen

The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow hi

The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, all

The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could a

The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, all

The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files,

The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in

The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing us

The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could all

The WP Discord Invite WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow

The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using

The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores a

The Simple Table Manager WordPress plugin through 1.5.6 does not sanitise and escape some of its settings, which could a

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which coul

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the cra

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for us

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulner

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't p

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used

strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked