2022

Frontier is an Ethereum compatibility layer for Substrate. Prior to commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658, the

MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading

Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-ban

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-bank

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-ban

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-ban

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-bank

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-ban

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-ban

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-ban

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.

A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 1

Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Podcasting plugin <= 2.16.0 at WordPress, leading to

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerab

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability

Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerab

Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function.

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a loc

Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 40

Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi

Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress.

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the F

A cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the complete chat window, an ad

A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any auth

A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server method

A improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that allowed two factor authentic

A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in th

A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 in t

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-00

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Pr

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-00

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadO

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5. An a

This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, wa

This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monte

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-00

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-00

The issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadO