2022

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream w

Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot s

A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue

A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability af

A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unk

A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a differ

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /pa

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/setting

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /p

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /p

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /p

An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitra

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to c

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafte

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at

Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools

IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr

A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass o

IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attac

A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name whil

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML feat

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs whil

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values bei

A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-le

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a mess

A malicious unauthorized PAM user can access the administration configuration data and change the values.

A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. T

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This fl

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classl

A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while

It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA

A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the pa

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segme

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contai

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is no

A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deploymen

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing atta

The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly s

A flaw was found in satellite. When giving granular permission related to the organization, other permissions allowing a

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the par

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated