2022

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username

Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. Th

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user manage

ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1

Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.p

A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web s

Windows Graphics Component Information Disclosure Vulnerability

Skype for Business Information Disclosure Vulnerability

Skype for Business and Lync Spoofing Vulnerability

Azure SDK for .NET Information Disclosure Vulnerability

Azure Site Recovery Information Disclosure Vulnerability

Azure Site Recovery Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Microsoft Defender Denial of Service Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows iSCSI Target Service Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 ver

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API k

Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the cha

Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115

Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbi

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before se

A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IO

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gai

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches c

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att