2022

A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experienc

Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configura

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filter

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c.

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c.

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web

In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure D

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects a

A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by

A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected

A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affect

powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain

In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavata

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening craft

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service l

Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.10001

Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can

MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewri

MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many admin

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` c

HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL

Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication me

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).

In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the

In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a phone parameter that is v

In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to R

An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror attribute of an IMG element, le

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable

Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local au

Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially e

Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privil

Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege att

Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could po

Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could poten

Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin u

Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user cou

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially ex

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege