2022

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated

Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability

.NET and Visual Studio Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability

Windows Desired State Configuration (DSC) Information Disclosure Vulnerability

Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that

Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerabi

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom

Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to pot

Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated

Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Xakuro's XO Slider pl

Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to

Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-S

A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to pot

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentia

Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter.

Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows chang

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to cre

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not ha

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not ha

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Admin Management Xtended plugin <= 2.4.4 at WordPress.

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's

Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit_project_settings.php in REDCap 1

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger_ajax.php in REDCap 12.0.11. This

Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenti

A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke

Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensit

Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Googl

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows a

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Promotion

Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting

Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCo

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress.

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a den