2022

Windows Kernel Elevation of Privilege Vulnerability

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows WLAN Service Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows Event Logging Service Denial of Service Vulnerability

Windows DHCP Client Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Active Directory Certificate Services Security Feature Bypass

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Active Directory Certificate Services Elevation of Privilege Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Microsoft Windows Defender Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters.

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js.

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpa

Service Fabric Explorer Spoofing Vulnerability

Windows NTLM Spoofing Vulnerability

Windows CryptoAPI Spoofing Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin da

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.

A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registr

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=.

Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.

Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This iss

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can

Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <=

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Boos

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascr

Cloud Mobility for Dell Storage versions 1.3.0 and earlier contains an Improper Access Control vulnerability within the