2022

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.

]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.

The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL stat

The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By addin

The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege user

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.

Safe Software FME Server v2021.2.5 and below does not employ server-side validation.

The BadgeOS WordPress plugin before 3.7.1.3 does not sanitise and escape parameters before using them in SQL statements

The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using th

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation paramet

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation

The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege u

The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high priv

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could a

The WordPress Ping Optimizer WordPress plugin before 2.35.1.3.0 does not have CSRF check in place when updating its sett

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a websit

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:j_id97 parameter at

A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to e

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.

An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from

The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper inp

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel me

Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' subst

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.

The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.

Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.

some-natalie/ghas-to-csv (GitHub Advanced Security to CSV) is a GitHub action which scrapes the GitHub Advanced Security

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an at

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud

Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager P

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webse

TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel we

TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`, `requeste

TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a

TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `in

TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list att

TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to

TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is giv

TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is giv

TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient`

TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates,

TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates,