2022

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.

Use After Free in GitHub repository vim/vim prior to 9.0.0260.

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly

A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could

A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that

A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacke

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An atta

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulner

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file.

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c.

An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O

A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.

A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.

A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mac

An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mac

An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted

A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafte

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post

A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated, remot

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary comma

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an u

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote at

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15

A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15)

Cross-Site Request Forgery (CSRF) vulnerability in SEO Scout plugin <= 0.9.83 at WordPress allows attackers to trick use

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values fre

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify t

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpa

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enoug

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of prop

A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific f

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, all

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and

A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwo

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a maliciou

A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted

Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreS

Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common N

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was ca

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. T