2022

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A loca

Dell Command | Integration Suite for System Center, versions prior to 6.2.0, contains arbitrary file write vulnerability

Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user

In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-boun

In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be t

AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.

An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is e

The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authe

Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list.

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.

An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is cal

A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple ca

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 s

Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell Cont

Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a

Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions w

Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (L

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of pr

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 calle

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can c

There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device resp

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavio

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbeh

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of ser

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unre

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code

AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to preven

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cau

A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exp

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exp

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauth

A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable pe

There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a n

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject cre

Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted p

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is ma

An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() func

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowi

Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific p

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy heade

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packe

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's cho