2022

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially cr

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerp

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only p

Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attac

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attac

A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communic

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted p

The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenanc

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in bin

In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa.

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.

In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for e

In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vu

In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.

In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.

TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.

Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and

An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version

An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 an

Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.

Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8.

OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users

Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows r

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to ach

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an

A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to

Systematic FIX Adapter (ALFAFX) 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allo

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language)

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affect

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problem

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.

The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow

The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in

The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks