2022

A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to exec

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute a

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component C_Featu

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budg

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allo

An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of servi

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x65fc97.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b544e.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b0.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b8.

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_mems

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32.

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_acce

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all

A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administra

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWha

A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Whe

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editi

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for t

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/de

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclos

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this we

This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use thi

This vulnerability of SecureGate is SQL-Injection using login without password. A path traversal vulnerability is also i

An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order

A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow

IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the t

Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a cer

A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the prod

A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service

A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a

A vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certai

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker

Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One a

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lea

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieg

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerabilit

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerabilit

Trend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with lower privileges could ma

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used.

Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) from Necta LLC's authentication mechanism

Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.