2022

Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unautho

Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users

The login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL Injection with Out-of-Band Intera

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory travers

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attack

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affec

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitatio

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayF

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a coc

Sensitive information could be displayed when a detailed technical error message is posted. This information could discl

Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge informa

Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a d

Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that cause

Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direc

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a dire

The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an appl

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an appl

An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Den

Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a De

abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c.

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript

Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to

Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing conf

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions p

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. Affected vers

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of co

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause

Maddy Mail Server is an open source SMTP compatible email server. Versions of maddy prior to 0.5.4 do not implement pass

An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malic

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized

Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator

Visual Studio Code Spoofing Vulnerability

Skype Extension for Chrome Information Disclosure Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Office Word Tampering Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability