2022

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to ex

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with

The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to e

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should ha

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's c

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, ma

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address tha

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files wit

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a rem

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an exte

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the t

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentia

Use After Free in GitHub repository vim/vim prior to 8.2.

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect r

A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers s

A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SE

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating s

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-fre

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_ge

A format string vulnerability was found in libinput

A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() locate

An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_Defin

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located

An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_Defi

An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allo

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() loc

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON

OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via

lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scan

RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type.

An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a d

Missing input validation in internal/db/repo_editor.go in Gogs before 0.12.8 allows an attacker to execute code remotely

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target

SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege esc

Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.

BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection se

A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject exe

Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administra

Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.

Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.