2022

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to explo

Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit

ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are su

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated use

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder AP

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a c

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process on

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicio

tiny-csrf is a Node.js cross site request forgery (CSRF) protection middleware. In versions prior to 1.1.0 cookies were

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a c

In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service w

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of pri

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to rem

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privileg

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local esca

In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit

Wedding Planner v1.0 is vulnerable to arbitrary code execution.

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=.

A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts

An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Managemen

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/ad

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/ad

A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba Instant

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba Instant

An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Su

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Executi

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management Sys

An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers

A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote att

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providi

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond th

A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploite

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Imag