2022

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPPoE. This vulnerability a

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanNonLogin. This vulnerabilit

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read

A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-craft

qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI.

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious att

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unau

Dell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated

Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which

An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden,

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the

IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker

A Buffer Overflow vulnerability exists in zlog 1.2.15 via zlog_conf_build_with_file in src/zlog/src/conf.c.

An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a mal

libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable

libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388.

libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.

libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.

RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated

An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php.

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page

Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental/booking.php via the id par

Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class

Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. Th

Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerabil

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. Th

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploaded_songs.php. This vulnerabi

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Ad

SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is ca

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a tr

Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to in

aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass aut

Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attack

ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unaut

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient val

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An u

ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special charac

ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special charac

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulti

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a v

The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vuln

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can sub

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a mal

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a fail