2022

Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the bac

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could poten

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could poten

Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with phy

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator us

Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated a

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potenti

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could poten

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized ac

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket ha

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with spr

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes

Torguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such as credentials and inf

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbi

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbit

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute

Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 all

An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to download arbitrary files r

An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to write arbitrary files to t

An issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator v1.0.1808.0901 allows attackers to c

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and

In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable t

In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.

SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.

SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.

SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.

This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break o

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next qu

Apache Calcite 1.22.0 introduced the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not rest

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial

PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.

cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1

Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/u

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged

A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or

indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In v

An issue was discovered in Active Intelligent Visualization 5. The Vdc header is used in a SQL query without being sanit

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker En

In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, f

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the

OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.

An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has be