2022

An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x;

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104

Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component,

Directory listing is a web server function that displays the directory contents when there is no index file in a specifi

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.

The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote atta

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects un

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.

The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via e

SoftGuard Web (SGW) before 5.1.5 allows HTML injection.

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Servic

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory.

Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be p

Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Unive

Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if

In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collectio

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog fold

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing hi

The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before ou

The Simple Post Notes WordPress plugin before 1.7.6 does not sanitise and escape its settings, allowing high privilege u

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting th

The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privileg

The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attr

The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing

The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privile

The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high pri

The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them bac

The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate

The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as ad

The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table se

The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege user

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitiz

The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back i

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying pr

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknow

A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part

A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown proce

A vulnerability classified as critical has been found in Itech Classifieds Script 7.27. Affected is an unknown function

A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unkno