2022

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Credential Roaming Service Elevation of Privilege Vulnerability

.NET Framework Remote Code Execution Vulnerability

Windows Photo Import API Elevation of Privilege Vulnerability

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. The Internet Relay Chat (IRC) protocol allows you

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions request

JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.

Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepte

The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explic

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided

In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and

SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even

An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpa

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 4

SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for th

An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Ser

In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denia

The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_ti

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the crea

Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/app

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the repor

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file,

Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation se

The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with net

Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with mom

Pal Electronics Systems - Pal Gate Authorization Errors. The vulnerability is an authorization problem in PalGate device

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the reco

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Pro

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this

A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resu

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerabilit

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in RD Station plugin <= 5.2.0 at WordPress.

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive informatio

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload