2022

jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup ma

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to tr

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-

In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version

An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticati

A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a d

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user conne

A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to cras

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Thi

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime lin

A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnera

A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to cor

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. T

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a cr

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the comman

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subseq

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorr

A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancill

A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read dur

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) propertie

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd c

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exh

An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly relat

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not ali

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulne

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the comp

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_c

Advancecomp v2.3 was discovered to contain a segmentation fault.

Advancecomp v2.3 was discovered to contain a segmentation fault.

Advancecomp v2.3 was discovered to contain a heap buffer overflow.

Advancecomp v2.3 was discovered to contain a heap buffer overflow.

Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.

Advancecomp v2.3 contains a segmentation fault.

Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field

The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that w

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder