2022

Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can expl

Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit

smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, wh

Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privileg

Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A phys

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code exe

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs beca

An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.

An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to ach

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter.

Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents w

Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that custo

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL poi

An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct

DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to in

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.

Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template mo

EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability wh

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo d

ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker

In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b

Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.

A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk i

SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application logi

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/S

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLA

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger

Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.

Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing

Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register

Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Comp

Unlimited strcpy on user input when setting a locale file leads to stack buffer overflow in mIPC camera firmware 5.3.1.2

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Nam