2022

A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function deco

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the fi

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc o

Vulnerability in the Oracle Cloud Infrastructure product of Oracle Cloud Services. Easily exploitable vulnerability allo

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can le

Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/schepro

Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and leng

All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(ty

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise

An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser t

u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the param

IBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow a

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR

Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of

A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which

A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processin

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component P

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionali

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknow

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interfa

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacke

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interfa

CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could all

Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.

Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php.

Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php.

Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code du

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued o

Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.

An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number o

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web

A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the Maia

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execut

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized

Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24.

VMware HCX update addresses an information disclosure vulnerability. A malicious actor with network user access to the V

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_catego

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes/Master.php.

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by th

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vul

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the com

A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is