2022

A vulnerability classified as problematic has been found in CTF-hacker pwn. This affects an unknown part of the file del

Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents.

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exha

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verify

An issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in admin/ad_list.php.

IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary

Improper neutralization of special elements used in an LDAP query ('LDAP Injection') vulnerability in ActiveDirectory an

Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an admini

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to al

A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecu

Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Ty

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acces

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript co

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote a

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote aut

tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (

Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authen

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the c

Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS).

ILIAS before 7.16 allows External Control of File Name or Path.

ILIAS before 7.16 has an Open Redirect.

ILIAS before 7.16 allows XSS.

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text expl

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text expl

Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface res

Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.

Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that d

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 13.1.0.9 on WordPress.

AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitab

IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decr

Passeo is an open source python password generator. Versions prior to 1.0.5 rely on the python `random` library for rand

teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.1

Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through

An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiA

Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.

A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the f

A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the co

In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of serv

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.