2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.

It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X (4.

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.

Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascript

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing den

A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI h

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a s

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook model

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, Think

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS t

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BI

Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configu

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an att

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username.

Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Ar

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users t

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browse

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could ha

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb atta

The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially craf

All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user.

Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/too

ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with gen

OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer

OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer

Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker co

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.

ACS Commons version 5.1.x (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in /apps/acs-c

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page sour

<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible t

A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authentica

A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified C

A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Sof

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni

A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified C

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM &amp; Presence Service

A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker

The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification l

Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when usi