2022

Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a den

A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary c

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH clie

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 a

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functio

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in t

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated bin

Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd

Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate pr

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to ve

OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract information from the databas

OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An attacker can inject a

Remote Code Execution (RCE) vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. Users c

An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access an

HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attack

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats projec

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats projec

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners C

VIewComponent is a framework for building view components in Ruby on Rails. Versions prior to 2.31.2 and 2.49.1 contain

A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.

In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the

The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix p

A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to exe

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request,

A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() i

A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to ex

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow

Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aru

An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Arub

Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aru

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Improper Authorization in GitHub repository webmin/webmin prior to 1.990.

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 t

Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator pri

An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remo

Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the compon

An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote

Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalo

Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.

diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data abo

ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path tra