2022

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cau

A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform

A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, lo

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches c

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the c

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmco

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This v

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing atta

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing atta

An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafte

Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs

Discourse is an open source platform for community discussion. A category's group permissions settings can be viewed by

DisCatSharp is a Discord API wrapper for .NET. Users of versions 9.8.5, 9.8.6, 9.9.0 and previously published prerelease

Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowed

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of i

A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versi

Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactp

An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/

A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earl

A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier,

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1

An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A sp

An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A sp

A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_2

An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 37

IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensit

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is u

An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuratio

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Ne

An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Juno

A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos O

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a loca

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the d

An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file

Sourcecodester Messaging Web Application 1.0 is vulnerable to stored XSS. If a sender inserts valid scripts into the cha

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker in control of a GoCD Agent can plant malicious J

Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-cli

A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_fr

Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action i

An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-O

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial o

Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import