2022

Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are aff

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of op

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting fr

.NET Framework Denial of Service Vulnerability

Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.

Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress.

Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds read vulnerabilit

This vulnerability arises because the application allows the user to perform some sensitive action without verifying tha

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideo

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP (fixed in 17.0.0), a cross-site reque

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook me

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on W

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Das

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST paramete

In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible

In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting character

Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment,

An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 21.0.

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.1

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1,

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the fil

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from th

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vuln

Microsoft Power BI Spoofing Vulnerability

Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1

Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplu

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allow

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by explo

The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information.

The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to acce