2022

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of s

In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of s

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the w

When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all ver

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 be

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 be

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions start

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2

FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Pan

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.

FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sectio

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirec

An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and be

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.

Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a, 11.11.5, a

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and p

Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.

qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a

A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when

Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this

Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulne

Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated

PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, with

Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged networ

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.

Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error mess

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject

Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated

Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include

BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The pa

Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the

Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's passw

bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS.

In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.

In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete_img.

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple_chat_bot/classes/Master.php?f=delete_img.

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequeste

Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.

Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img.

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.p