2022

A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves appli

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

OMPL v1.5.2 contains a memory leak in VFRRT.cpp

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/

In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed

Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52.

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers

A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an un

A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat D

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA)

A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unau

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow

A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthent

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA)

A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat D

A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of C

A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fire

XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res

XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res

XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res

XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially res

APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.

An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus T

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointe

The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege u

The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could

The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options v

The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which co

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url par

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host

Rainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack that allows an authenticated us

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream positi

A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather cred

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kio

In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were s

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attribute

The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery (SSRF) when int

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeRepl

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main

The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validatio

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of th

The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the

All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData<T> function