2022

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 t

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.

Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.c

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing at

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary c

Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.

Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.

Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/maste

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enable

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker

Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attack

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which

Certain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check. This affects MSI Pack

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=sy

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to tak

In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user

Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive inf

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive

A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.

A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by

Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic vi

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, TensorFlow

RegionProtect is a plugin that allows users to manage certain events in certain regions of the world. Versions prior to

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send pack

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with lo

GoCD is a continuous delivery server. In GoCD versions prior to 22.1.0, it is possible for existing authenticated users

This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodej

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all input

Cilium is open source software for providing and securing network connectivity and loadbalancing between application wor

Cilium is open source software for providing and securing network connectivity and loadbalancing between application wor

WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin

SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account)

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files corr

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenge

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with c

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramete

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V1

MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the s

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions <