2022

RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19.

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an o

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribu

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue

A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an un

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?ms

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers

In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing.

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address.

In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR

Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to b

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website co

Silverstripe silverstripe/framework through 4.10 allows Session Fixation.

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack vi

A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTM

Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.

Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more

Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For

Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptio

Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more

Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For m

Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder.

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previe

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without e

Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a ma

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker coul

Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_

In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in A

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box

The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in

The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box

The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4B

A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unkno

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unkn

A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing