2022

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Ty

A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker

A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execut

A Directory Traversal vulnerability exists in WeBankPartners wecube-platform 3.2.1 via the file variable in PluginPackag

A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install plugins function, which

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alt

A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.

An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remot

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Se

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Se

An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a

A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a l

IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a re

Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not pro

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute a

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthentic

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cis

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.

OpenMRS is a patient-based medical record system focusing on giving providers a free customizable electronic medical rec

Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc impleme

Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will seg

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when s

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted r

Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `i

Wiki.js is a wiki app built on Node.js. In affected versions an authenticated user with write access on a restricted set

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains an out

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection v

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file inc

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SM

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to adm

The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter befor

The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters b

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features,

The ExportFeed WordPress plugin through 2.0.1.0 does not sanitise and escape the product_id POST parameter before using

The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it i

The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before using

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using Http

PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit

Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWN

An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain so