2022

Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the r

A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of

Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potenti

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit hea

Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap c

Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corr

Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap co

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to insta

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to i

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potenti

TPCMS v3.2 allows attackers to access the ThinkPHP log directory and obtain sensitive information such as the administra

A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability w

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerabilit

A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has

A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6.

Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor

An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught,

AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requi

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly v

AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communicatio

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during

AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previ

AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic sign

Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status,

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.7.0, unauthorized Ja

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the T

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings ca

A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when th

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vul

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getLi

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget be

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's bookin

The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and

The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is kn

An Unquoted Service Path vulnerability exists in Ext2Fsd v0.68 via a specially crafted file in the Ext2Srv Service execu

An Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially crafted file in the SystemExp

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) V

An Unquoted Service Path vulnerability exists in bVPN 2.5.1 via a specially crafted file in the waselvpnserv service pat

An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the R

An Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the FreeLAN Service path.

An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService p

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers

An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to uploa

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remo

A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue

a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. T

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execu