2022

A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel.

A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel.

A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF at

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denia

In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could

Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject ar

Apache Kylin allows users to read data from other database systems using JDBC. The MySQL JDBC driver supports certain pr

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scrip

The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should m

In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based

The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expirin

forge is vulnerable to URL Redirection to Untrusted Site

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets

An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.

An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeO

A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrar

Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site sc

A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context

Jawn is an open source JSON parser. Extenders of the `org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFa

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Se

Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may b

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Serv

A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which

Discourse is an open source platform for community discussion. In affected versions when composing a message from topic

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileg

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest p

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest p

Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.

A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Sof

A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail v

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be explo

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator gro

Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted

Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of

Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.

OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS

PJSIP is a free and open source multimedia communication library written in the C language implementing standard based p

Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in

In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This cou

In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple

In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local info

In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to loca

In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local informa

In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of pri