2022

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation o

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack.

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and

A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of pri

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow ar

An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro

Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows

A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire cred

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to ac

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.

SENS v1.0 has a file upload vulnerability.

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. Thi

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users

Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119

Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could s

There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current key

Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability

Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extra

go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project.

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.

In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented.

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text dur

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInf

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFil

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter.

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickInd

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetW

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.