2023

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-S

there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local es

In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile

In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic err

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to loc

In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper in

In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device

In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a de

In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the loc

In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lea

In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due t

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown par

A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permissi

A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to

A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attacke

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to t

A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attacke

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attacke

A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read perm

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.

Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerabi

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by

During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially explo

A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in AC

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow

An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfigurati

Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could l

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Function Worker. This issue affects A

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenti

SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user t

SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to

In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege wit

In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege wit

In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no add

In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no add

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause u

There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a r

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 202

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerab

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerabil

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validati

The WP Reroute Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions

The Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to,

The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions

The Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up t

The Mailtree Log Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions

The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to