2022

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their us

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS a

There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking

There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cau

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resou

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the de

Microsoft Endpoint Configuration Manager Spoofing Vulnerability

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfi

In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in Syste

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in Syste

A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mo

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attac

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via t

Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages

In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege es

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writabl

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to ga

A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload maliciou

Final CMS 5.1.0 is vulnerable to SQL Injection.

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.

Cloudreve versions v1.0.0 through v3.5.3 are vulnerable to Stored Cross-Site Scripting (XSS), via the file upload functi

Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially en

Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially en

Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially e

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL

HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS

Code Injection in GitHub repository microweber/microweber prior to 1.3.2.

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpag

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability all

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and und

The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass. A client can issue an HTTP Accept heade

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submit

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTT

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair