2022

Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attack

A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. Thi

A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and

A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to e

devhub 0.102.0 was discovered to contain a broken session control.

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventor

74cmsSE v3.12.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /apiadmin/notice/

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credential

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the fil

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the func

A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCou

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic.

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problemat

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problem

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Aff

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the functio

A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damon_sysfs_ad

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function un

A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_ad

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allo

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before u

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encodin

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could

The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors,

The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high p

The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQ

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could

The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJA

The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and gu

The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could

The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege us

A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_

Article template contents with sensitive data could be accessed from agents without permissions.

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are

An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the