2022

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipu

A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown f

Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privil

aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is som

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnera

A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file b

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulne

Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5

Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to rea

A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown

A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of th

A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static

A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of

A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function chec

A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown p

A vulnerability classified as problematic was found in tad_discuss. Affected by this vulnerability is an unknown functio

A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown func

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. T

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unk

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function d

A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function

A vulnerability was found in sah-comp bienlein and classified as problematic. This issue affects some unknown processing

A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerabil

Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.

A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrar

Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager  2022.3.26 and earlier on

Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.

Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information d

Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information dis

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixl

This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and pri

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A miscon

Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains sp

Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a

Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacke

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handlin

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting (XSS) due to improper user inp

All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sand

The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the We

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper

A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unaut

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.