2024

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. S

Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cr

Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, whic

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionali

Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulner

Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120

This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser

A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vll

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious li

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a t

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which cou

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisa

The Enhanced Search Box WordPress plugin through 0.6.1 does not have CSRF check in place when updating its settings, whi

The Review Ratings WordPress plugin through 1.6 does not have CSRF check in some places, and is missing sanitisation as

The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisati

The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which

The infolinks Ad Wrap WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which

The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisati

The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which c

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadO

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS

This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, i

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be a

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18

A logic error was addressed with improved error handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iP

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15, macO

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15, macOS Sonoma

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.

A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, ma

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.7 and iPadOS 17

This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and

A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 18 and iPad

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadO

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Son

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15,

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sono

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macO

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gain