2022

A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attac

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers

A buffer overflow in the GmfOpenMesh() function of libMeshb v7.61 allows attackers to cause a Denial of Service (DoS) vi

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the us

An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may

Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploitation requires administrator privileges

The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization,

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker w

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacke

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Window

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt.

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type,

snipe-it is vulnerable to Missing Authorization

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denia

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

Windows Defender Credential Guard Security Feature Bypass Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Windows Defender Application Control Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Win32k Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

Windows Cleanup Manager Elevation of Privilege Vulnerability

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously,

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authe