2022

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1

An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database info

An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document

An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permis

Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor.

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-control

An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cook

An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings.

An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRout

There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause d

Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality

The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect

Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the av

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of th

kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf clus

Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of thi

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may af

The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privileg

The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability

npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a worksp

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection.

The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and

The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting

Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscribe

Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or cu

Open Forms is an application for creating and publishing smart forms. Open Forms supports file uploads as one of the for

The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,

The Copify plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.0. Thi

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exp

The One Click Plugin Updater WordPress plugin through 2.4.14 does not have CSRF check in place when updating its setting

The Auto Delete Posts WordPress plugin through 1.3.0 does not have CSRF check in place when updating its settings, which

The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to

The Hot Linked Image Cacher WordPress plugin through 1.16 is vulnerable to CSRF. This can be used to store / cache image

The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origi

The Genki Pre-Publish Reminder WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settin

The Log WP_Mail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filen

The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, lea

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high

Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated att

Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated att

Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated atta

Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie cons

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.

Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.

Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+.

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects un

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obt

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental f