2022

A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlie

Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS comma

An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when startin

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionalit

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Soc

An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users h

An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a py

An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, whic

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authen

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop.

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the Ch

Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings

crater is vulnerable to Unrestricted Upload of File with Dangerous Type

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings throu

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of

growi is vulnerable to Authorization Bypass Through User-Controlled Key

SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard r

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML supp

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

DirectX Graphics Kernel Remote Code Execution Vulnerability

.NET Framework Denial of Service Vulnerability

Microsoft Cluster Port Driver Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

DirectX Graphics Kernel Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Remote Desktop Protocol Remote Code Execution Vulnerability

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Windows Modern Execution Server Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Geolocation Service Remote Code Execution Vulnerability