2022

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Track

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gatew

In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify pri

EC-CUBE 3.0.0 to 3.0.18-p3 and EC-CUBE 4.0.0 to 4.1.1 improperly handle HTTP Host header values, which may lead a remote

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve c

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "p

Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In thi

zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of mem

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is

In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is

Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XS

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series version

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series version

Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms V

Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (f

Multiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) file parameter and

A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file.

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramF

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Secur

A Cross Site Scripting (XSS) vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the ad

Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.

Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privile

Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 throug

Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. Affected versions of OctoberCMS did not val

B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases o

b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux and Mac releases of the SDK versi

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users

IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a

Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an u

Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.

Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.

Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.

Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cl

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions Envoy does

Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated resp

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor