2022

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application ru

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability

A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may r

A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kern

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD paramete

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionR

It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session aut

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-

The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk En

SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds ha

An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attack

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow

engine.c in slaacd in OpenBSD 6.9 and 7.0 before 2022-02-21 has a buffer overflow triggerable by an IPv6 router advertis

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-

grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.

A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4

SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matche

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service functi

Bluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to contain an information

Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To explo

SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticat

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an auth

Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.

Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.

Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems.

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file downl

NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM

Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Servi

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications.

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.3.0 but before

A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c

A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUn

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execut

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command inj

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another i

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing

The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the l