2022

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"),

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

Cross-site Scripting (XSS) - Stored in GitHub repository appwrite/appwrite prior to 1.0.0-RC1.

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition w

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network,

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the pr

UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode i

The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a d

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisio

cruddl is software for creating a GraphQL API for a database, using the GraphQL SDL to model a schema. If cruddl startin

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the compo

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the compo

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the compo

Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid paramete

XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Start

XWiki Platform Wiki UI Main Wiki is software for managing subwikis on XWiki Platform, a generic wiki platform. Starting

XWiki Platform Mentions UI is a user interface for mentioning users in wiki content for XWiki Platform, a generic wiki p

XWiki Platform Attachment UI provides a macro to easily upload and select attachments for XWiki Platform, a generic wiki

The XWiki Platform Index UI is an Index of all pages, attachments, orphans and deleted pages and attachments for XWiki P

XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Re

XWiki Platform Web Parent POM contains Web resources for the XWiki platform, a generic wiki platform. Starting with vers

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) o

TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execu

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the dis

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 14.2 and 13.10.

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/de

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /interv

bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but sto

Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the

Bminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially gain unauthorized acce

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. Through the suggestion feature,

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET req

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a

IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system.

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 13.1.0.5 and 14

Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `Wit

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking