2022

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol g

MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.

RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulat

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KV

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker co

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write b

A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using th

IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it

An path traversal vulnerability leading to delete arbitrary files was discovered in BigFileAgent. Remote attackers can u

An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers u

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functional

Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection. The user ne

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authenticat

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domai

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cau

Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line p

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist micro

This affects the package sprinfall/webcc before 0.3.0. It is possible to traverse directories to fetch arbitrary files f

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a

snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability

A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. Th

snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this b

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from A

HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec

IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer sec

A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS S

A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially c

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

TRIGONE Remote System Monitor 3.61 is vulnerable to an unquoted path service allowing local users to launch processes wi