2022

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ing

The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and includ

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity d

A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of th

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does n

A improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0.

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $ext

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. De

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0,

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboratio

gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Bo

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situatio

An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascrip

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name.

An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.

An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.

HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password b

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain ac

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Versi

Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configu

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of fi

The setup program for the affected product configures its files and folders with full access, which may allow unauthoriz

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receivin

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileg

An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly ch

A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to

next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted.

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQ

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQ

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows a

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supp

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affecte

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affecte

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gatewa

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Suppor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af