2022

Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking

LoRaMac-node is a reference implementation and documentation of a LoRa network node. Versions of LoRaMac-node prior to 4

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorizati

DiscoTOC is a Discourse theme component that generates a table of contents for topics. Users that can create topics in T

PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP ma

MyBB is a free and open source forum software. The _Mail Settings_ → Additional Parameters for PHP's mail() function mai

PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJ

syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sy

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public cl

IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vuln

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulatio

In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template fun

In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete user functio

A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perf

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application,

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting s

Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authent

The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and p

The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and

The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and p

A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installatio

IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By pers

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulne

pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This v

phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.ph

Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in fi

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption

Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploit

Arbitrary file upload vulnerability in php uploader

A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could

A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnera

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autod

A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write b

Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. Thi