2022

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unaut

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6

An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.

Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.

Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a

Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static page

ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file

A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. User

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-upd

CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar f

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():sr

Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h.

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via craf

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via craf

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok

ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise().

David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats pr

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats projec

David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats projec

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may

The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before usin

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a

The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a S

The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin

In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" per

In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_V

Improper Access Control in GitHub repository zulip/zulip prior to 4.10.

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an ex

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session.

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via

Zulip is an open-source team collaboration tool with topic-based threading. Zulip Server version 2.0.0 and above are vul

In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This v

A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers t

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an a

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to

Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitatio

The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which ca

The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to

The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00)

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.