2022

Code Injection in GitHub repository nuitka/nuitka prior to 0.9.

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the D

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connect

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticate

An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in pt

Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1

Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial version

Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial version

Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial version

The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will cause

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the defa

The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG

All versions of package git-promise are vulnerable to Command Injection due to an inappropriate fix of a prior [vulnerab

The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags

Use After Free in GitHub repository vim/vim prior to 8.2.

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacke

IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operati

A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remot

A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/si

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the

Guzzle is an open source PHP HTTP client. In affected versions `Authorization` headers on requests are sensitive informa

Guzzle is an open source PHP HTTP client. In affected versions the `Cookie` headers on requests are sensitive informatio

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vuln

A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability a

Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method vulnerability that could allo

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the rem

Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to sen

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data i

Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of t

If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.

In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a deni

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Se

The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL

Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive inf

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of th

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulner

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the d

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_recor

CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variab

Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request b

The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability t