2022

An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component coul

The Advanced Comment Form WordPress plugin before 1.2.1 does not sanitise and escape its settings, allowing high privile

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_sl

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make

The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before

The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any a

The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow hig

fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of s

Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote atta

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker c

IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated

The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog fold

The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don't mitigate time-based attacks, which could b

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its

The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in fr

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder

The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high p

The Disable User Login WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating its sett

A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series

A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,

A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Softw

A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst

A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalys

A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NA

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cis

The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpw_setpage pa

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject a

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject a

Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitiv

A vulnerability was found in Crealogix EBICS 7.0. It has been rated as problematic. Affected by this issue is some unkno

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.

app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (this is information t

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authentic

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authentic

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authentic

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by t

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affect

fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM). In versions prior to 0.

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini fol

An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups