2022

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issu

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown

A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerabi

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs a

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (Re

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability th

Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerabilit

Adobe Photoshop versions 22.5.7 (and earlier) and 23.3.2 (and earlier) are affected by an Access of Uninitialized Pointe

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are

Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a

Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.

In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs.

Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory p

Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables co

Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remot

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(fo

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made fi

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Item Na

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table N

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaur

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in t

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's respon

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a D

Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the c

The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit funct

Gradle is a build tool. Dependency verification is a security feature in Gradle Build Tool that was introduced to allow

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to in

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way u

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (AC

The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allo

The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported fi

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access s

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a speci

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header i

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitiv

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive infor

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker