2022

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions <

A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials v

Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which all

A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an ou

BattlEye v0.9 contains an unquoted service path which allows attackers to escalate privileges to the system level.

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V1

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.8.

OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending cr

Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged re

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attacke

Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Ea

HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to t

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups paramet

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid inpu

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret eve

An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and passw

An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and passw

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 1

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software P

Use After Free in GitHub repository vim/vim prior to 8.2.4979.

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbi

Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverab

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulne

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerab

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of

Windows Print Spooler Elevation of Privilege Vulnerability

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Windows)

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, W

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exp

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free bo

SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.

Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.

Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before ver

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly pars

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authent

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud S