2022

An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43

UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.

Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, is

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the t

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV

A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malic

SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code.

An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x throu

Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted i

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerabili

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability all

Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerabilit

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allows

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allo

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerabili

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulner

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerabili

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allo

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allo

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an atta

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an u

Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an atta

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the '

A null byte interaction error has been discovered in the code that the telnetd_startup daemon uses to construct a pair o

The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated at

Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network t

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensiti

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthori

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to in

ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated u

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unpr

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information t

The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functiona