2022

Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.

A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6

libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter.

Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code path, the attacker has

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.h

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/w

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/a

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <=

Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributo

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plug

SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the syste

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the drive

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kerne

A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race w

A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on t

Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specifi

In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x -

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could caus

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRD

In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman cli

Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/W

A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to ex

A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functiona

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.p

Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitr

Discourse is an open source discussion platform. Versions 2.8.2 and prior in the `stable` branch, 2.9.0.beta3 and prior

Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder cont

Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in

NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions witho

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.

A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, wh

Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.

Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.

Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).

The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows

OpenEMR v6.0.0 was discovered to contain an incorrect access control issue.

Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to

iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which re

Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages t