2022

A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated,

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18.

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 al

In ERPNext, versions v12.0.9--v13.0.3 are vulnerable to Stored Cross-Site-Scripting (XSS), due to user input not being v

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected

A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832.

discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of se

The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.

IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best

An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom

IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.

There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low p

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS).

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.

Unioncms v1.0.13 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Default settings.

The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting (XSS) vulnerabi

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vm

SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiCo

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at s

maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part o

A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is

A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unkno

A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of th

A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown pr

A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unkn

A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part

A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown functio

A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some u

A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of

A vulnerability classified as critical has been found in Hindu Matrimonial Script. This affects an unknown part of the f

A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. Affected by this issue is some unk

### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ###

A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown

A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filter

Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0.

The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings

The WP Zillow Review Slider WordPress plugin before 2.4 does not escape a settings, which could allow high privilege use

The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own