2022

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can

Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function f

Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function T

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time para

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time par

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWi

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fr

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fr

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local ad

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll un

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacke

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality

WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted C

Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installat

Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5c

A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of th

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file

Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatc

A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affect

In affected versions of Octopus Server it was identified that when a sensitive value is a substring of another value, se

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious

iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js.

HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page

An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows att

DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_con

mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.

Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not prope

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is

An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a

Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via th

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thir

The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third

The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by

The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by

The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thi

The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted b

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thir

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thir

GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header.

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a thir

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a t