2022

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2.

A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue i

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are vulnerable to Insertion of Sensi

GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Trav

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes

GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file wr

Mutiny 7.2.0-10788 suffers from Hardcoded root password.

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an unauthorized attacker to perform privileged a

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow the execution of specific command injections on

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned p

BigBlueButton is an open source web conferencing system. Versions prior to 2.4.0 expose sensitive information to Unautho

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in

A SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary S

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology tha

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued

A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for t

The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user i

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerabil

Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions.

A vulnerability, which was classified as critical, has been found in y_project RuoYi 4.7.5. This issue affects some unkn

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown c

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 con

BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueBu

A vulnerability classified as problematic has been found in University of Central Florida Materia up to 9.0.0. This affe

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is s

A vulnerability classified as problematic has been found in SemanticDrilldown Extension. Affected is the function printF

A vulnerability was found in Joget up to 7.0.31. It has been rated as problematic. This issue affects the function getIn

A vulnerability was found in INEX IPX-Manager up to 6.2.0. It has been declared as problematic. This vulnerability affec

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown par

A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the functi

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.

A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerI

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allo

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external

AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which

Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-color Multifu

Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to

In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This co

In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check