2022

Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the PrefDBCredenti

LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.

A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary

There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, A

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT addr

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound re

Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the co

Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely

Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain acti

Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activ

Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activi

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain acti

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the

A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/i

A vulnerability was found in Demokratian. It has been rated as critical. Affected by this issue is some unknown function

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects t

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privile

MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with versi

Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in

Virtua Cobranca before 12R allows SQL Injection on the login page.

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman&section=get&page

Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequ

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure.

Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /..

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution.

Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certa

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could fo

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of ser

In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of

An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell co

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vu

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a

An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of

A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to

FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin

In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file)

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the param

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization th

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.