2022

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary

Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashb

A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to con

A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker

A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerabil

Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the config

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful expl

A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of t

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code du

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code du

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to v

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pai

IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many

Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.

A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows at

Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resu

Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credential

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inse

Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is le

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmwar

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph

IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is vulnera

A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function

Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Networ

SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.

SENS v1.0 is vulnerable to Cross Site Scripting (XSS).

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization

Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

A vulnerability classified as critical was found in SourceCodester Canteen Management System. This vulnerability affects

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the co

A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unkno

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown f

Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11

FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an a

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.

IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vulnerable to cross-site scripting. This vulnerability allows us

In BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain sensitive information via the l