2022

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execut

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a differ

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when

An attacker can pre-create the `/Applications/Google\ Drive.app/Contents/MacOS` directory which is expected to be owned

HIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command source. As a result, an

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function in

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_g

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the functio

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_r

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_ca

In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3b are vulnerable to Unrestricted File Upload that leads to execution o

Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the r

An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force at

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the compo

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology AB Press Optimizer plugin <= 1.1.1 on Wor

Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability.

An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input

An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions fr

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions st

Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to

Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and

A branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions s

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4,

An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended form

An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 befor

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting fr

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an a

An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 befor

An improper access control issue in GitLab CE/EE affecting all versions starting before 15.1.6, all versions from 15.2 b

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting

A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions sta

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, 15.2 to 15.2.4 an

An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions f

A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior t

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting f

An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1

A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, al

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 1

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy cred

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerabilit

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of ce

Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers