2022

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor

IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vu

A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft

A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default pa

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line T

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequenc

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate

`Undici.ProxyAgent` never verifies the remote server's certificate, and always exposes all request & response data to th

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-bas

relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post reques

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the

In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Ma

Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.

Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attac

A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware i

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used fo

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing cred

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In ve

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitra

File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via

The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() fun

In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input va

In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could

In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informatio

In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a m

In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation

In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's

There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn cont

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-F

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to

The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation fun

This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before bei

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability