2022

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/

An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free

qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A

A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vul

Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attack

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config whic

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus

Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible becaus

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows atta

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to persuade users to perform unintended action

An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbi

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers t

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius serv

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dl

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authent

In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive t

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition th

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related

Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z all

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z

When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to vers

A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some u

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker c

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arb

The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminP

Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get_fields.html

A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to a

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t

Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member/memberedit.html component.

An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admi

org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user (logged

XWiki Platform is vulnerable to Cross-Site Request Forgery (CSRF) that may allow attackers to delete or rename tags with

A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be

CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requir

`yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize(

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, p

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and ac

CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterpri

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mount

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the se