2022

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.p

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting (XSS) in \admin\add_cata.p

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited,

Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step ev

libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability al

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_v

A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrar

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive informatio

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vu

An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users.

LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogCo

OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/

A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTM

A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute

An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are

Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross-Site Scripting (XSS) vulne

resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject ar

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.cu

A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that co

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checkl

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bi

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil

An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client con

Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).

ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 par

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext with

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacke

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed wit

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a

An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cau

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package,

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an at

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located i

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() lo

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() l

The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, fo

Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress.