2022

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.

The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and fro

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high a

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a craf

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arb

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key info

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key info

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configu

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet p

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system k

WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could all

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an u

Authenticated (high role user) WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin <= 3.6.0 at WordP

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ig

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via th

The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port

Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user

IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in fu

IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, w

IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker t

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu

Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress.

In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross

In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability

Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitizat

An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login featu

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insuff

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vu

Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPre

OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file witho

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw

An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a tru

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed,