2022

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allow

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafte

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafte

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is u

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access a

randomUUID in Scala.js before 1.10.0 generates predictable values.

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while pars

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a speci

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions

Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric M

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator

Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combin

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsyste

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SA

There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By craf

Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communicati

Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which dimini

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary r

Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2

Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may al

A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed con

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path

An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.

An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which m

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to res

An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due

A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter leng

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Produc

A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a

It was observed that while login into Business-central console, HTTP request discloses sensitive information like userna

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerabili

The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](htt

Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious use

The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git a

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When callin

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocat

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information

IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker than expected cryptographic algorithms that could

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to