2022

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown fu

A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an u

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unkn

A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unkn

A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerabilit

A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function

Trend Micro Security 2022 and 2021 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerabilit

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker wi

semantic-release is an open source npm package for automated version management and package publishing. In affected vers

The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies

A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change th

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 `DisplayName` does not filter charac

Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.

Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.

Cross-site Scripting (XSS) - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0.

Cross-site Scripting (XSS) - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0.

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause th

Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod

x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text exp

x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text exp

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular r

Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This requ

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue af

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknow

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part o

A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of t

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unkn

An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authentica

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unk

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affe

Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.

bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker

A reflected cross-site scripting (XSS) vulnerability exists in the playerConfUrl parameter in the /defaultui/player/mode

containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs in

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuth

Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authenti

Emlog Pro v 1.0.4 cross-site scripting (XSS) in Emlog Pro background management.

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncry

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind c

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig