Archive
8 May 2023
Vulnerabilities first published on this day (UTC), newest first.
185 results · Feed
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS B…
-
High 7.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…
-
Medium 6.5
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…
-
Medium 6.3
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break ou…
-
High 7.5
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPa…
-
High 7.8
This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app ma…
-
Unscored —
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gate…
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Process…
-
High 8.8
A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Stud…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be a…
-
High 7.8
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 a…
-
High 8.6
The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute…
-
Medium 5.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.…
-
High 8.8
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, …
-
Medium 6.7
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
High 7.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16…
-
Low 3.3
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macO…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Fil…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4…
-
Medium 5.5
Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, …
-
Medium 6.3
This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Mon…
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macO…
-
Medium 5.5
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…
-
High 7.8
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Mo…
-
Critical 9.6
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7, all versions star…
-
High 7.5
Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.
-
Critical 10.0
Code Injection in jsreport/jsreport
Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.
-
Medium 6.1
A prototype pollution vulnerability exists in Strikingly CMS which can result in reflected cross-site scripting (XSS) i…
-
Medium 6.7
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode si…
-
Medium 5.4
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in…
-
Medium 5.4
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in…
-
Medium 5.4
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in…
-
Medium 5.3CVE-2023-30019 Scanner template
imgproxy is vulnerable to Server-Side Request Forgery
imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.
-
Critical 9.8
Judging Management System v1.0 is vulnerable to SQL Injection. via /php-jms/review_se_result.php?mainevent_id=.
-
Medium 6.1
AsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the MiniMag.asm and bbco…
-
Medium 5.4
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in…
-
Critical 9.8CVE-2023-30092 Public exploit
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.