2022

Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OHS Config MBeans). Supported ve

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Sup

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API). Supported

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the fu

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary file

A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malic

Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime fu

Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_w

Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability

GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file paramete

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authent

The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. At

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] i

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] i

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] i

A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 thr

An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0

The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify th

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 th

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface

supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a whil

TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problemat

AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local use

AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escal

Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Af

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue aff

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulner

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic

A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected i

A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. Thi

A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affect

Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability.

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated atta

An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker

Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to

OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.

RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remot

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can in

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can pe