2022

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating w

matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious home

matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious home

ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom acce

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.

An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter "error_d

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly form

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.

A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application tha

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown

IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they shou

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability

IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed a

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending

IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc

Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.

ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vul

Hertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function.

Twig is a template language for PHP. Versions 1.x prior to 1.44.7, 2.x prior to 2.15.3, and 3.x prior to 3.4.3 encounter

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy is prone to refl

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was disco

Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a missing authentication allows fo

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin righ

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker

An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker

The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwa

TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated atta

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readu

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have acces

An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized use

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minim

Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a littl

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll (Ux

A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an un

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an

Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthen

Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScri

Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An

Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special ch

Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special c