2022

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects t

A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown par

ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authent

A vulnerability was found in Talend Open Studio for MDM. It has been declared as problematic. Affected by this vulnerabi

A vulnerability was found in simple_php_link_shortener. It has been classified as critical. Affected is an unknown funct

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The Authent

A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processin

There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful expl

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker t

There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the a

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.

A vulnerability was found in moappi Json2html up to 1.1.x and classified as problematic. This issue affects some unknown

The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could a

efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the

authentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, an

DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for inv

XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs

A vulnerability was found in Widoco and classified as critical. Affected by this issue is the function unZipIt of the fi

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function add_public_key

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unk

The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resou

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add applicat

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. Af

Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall ac

Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of o

Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain t

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.

A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils o

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdi

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.