2022

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS mi

Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions whi

Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find i

Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affect

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can explo

OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized

OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arb

OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploi

With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ fi

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There i

Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. Thi

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of th

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is a

A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by thi

A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some

A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability

A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3,

A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3,

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow t

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and includi

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of pr

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occ

GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at

A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security

PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, datab

CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three op

Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.

In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must fi

This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Reco

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Auth

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication

This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4

This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentica

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro

D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the funct

D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the funct

D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.

D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.

An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application

In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-ba

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticat