2022

There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file,

pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in p

Useful Simple Open-Source CMS (USOC) is a content management system (CMS) for programmers. Versions prior to Pb2.4Bfx3 a

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authentica

In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability (Formula Injection). A low privile

Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website c

The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL state

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file wit

The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary

The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file

The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action befo

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a q

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the s

peertube is vulnerable to Improper Access Control

peertube is vulnerable to Server-Side Request Forgery (SSRF)

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. MassEditRegex allows

Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to cr

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow

A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Fre

A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free B

A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim co

There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this v

There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in

The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may aff

There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this v

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect

The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability

There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vu

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation o

The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may a

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect

There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitatio

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data

The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerabil