2022

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.

StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute ar

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.

Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-mi

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attack

Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to t

Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code e

In Jellyfin before 10.8, stored XSS allows theft of an admin access token.

In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.

Use After Free in GitHub repository vim/vim prior to 9.0.0225.

A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attacker

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.

A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipu

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build informati

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Te

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload functi

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.

Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attacke

Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain adminis

lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.

Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privile

Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged

Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged

Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u

Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to

Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated u

Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileg

Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated us

Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u

libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.c

libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. Thi

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protoco

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librar

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staf

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staf

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /studen

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /libra

Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerabilit

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db

Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an

A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user w

Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authentic

The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contain

Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a p