2022

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permis

Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress.

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that d

The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that e

daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination

Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made

Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not p

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.

IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container.

Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due

An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.

RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 h

Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user

Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrato

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with

In power management service, there is a missing permission check. This could lead to set up power management service wit

In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no addit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

In power management service, there is a missing permission check. This could lead to set up power management service wit

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport proto

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, w

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write acces

GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_a

Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, all

An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP

A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds

Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /ruko

SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUplo

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with

A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insuffic

MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in vers

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in vers

A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing compo

AMI MegaRAC User Enumeration Vulnerability