2022

XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled,

Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environm

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting System

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is suscept

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by e

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by special

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an a

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged b

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root cer

The default password for the web application’s root user (the vendor’s private account) was weak and the MD5 hash was us

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that th

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via

A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms,

MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.

MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and op

A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames.

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an

Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which

In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, r

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninit

In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code.

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknow

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code exe

Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management Syste

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potenti

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potenti

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potenti

PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

totd before 1.5.3 does not properly randomize mesg IDs.

Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configu

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read pe

A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attacke

A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission t

A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to conn

A missing permission check in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers with Overall/Read permissi

A cross-site request forgery (CSRF) vulnerability in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers to

A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read pe

A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attacke

A missing permission check in Jenkins EasyQA Plugin 1.0 and earlier allows attackers with Overall/Read permission to con

Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins

A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Re

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Je

Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch paramet

Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers paramete

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on