2022

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to wr

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Naviswo

A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to wr

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-afte

Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice archite

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to r

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the def

A non-admin user with user management permission can escalate his privilege to admin user via password reset functionali

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerabi

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confide

The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the av

A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability m

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vuln

Incorrect Permission Assignment for Critical Resource in GitHub repository zerotier/zerotierone prior to 1.8.8. Local Pr

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interf

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO

AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-pri

The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploita

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affec

A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 (Ax46), V5.0.9 build 15110

IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remo

IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remo

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocu

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data,

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege use

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing C

An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its end

The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a downlo

In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to p

Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with

Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to i

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a

A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A

A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature.

A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature.

A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the in

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerabili

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability all

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerabilit

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerabilit

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability al

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability al