2022

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/do

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allo

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A

A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO

Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project

Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project

An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Projec

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenIm

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenIm

A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4

An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageI

A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Projec

A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-c

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF imag

A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Proje

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file dir

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branc

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A spe

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.1

IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read b

IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allow

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos O

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object th

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files the

IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they are

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up

is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vuln

Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Fire

Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety

A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firef

An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploita

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*:

Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team re

Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs p

By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user

The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a use

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious ext

Because Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who was able to inject marku

An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipb