2022

A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects

A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown c

A vulnerability classified as critical has been found in Itech Movie Portal Script 7.36. This affects an unknown part of

A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is

A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerab

Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to injec

Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scannin

Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sens

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of s

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.

The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.

The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/b

The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerabilit

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.

An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21.

The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execut

The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attac

The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and

The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitiv

The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an

The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose info

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session

Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions pri

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Tem

Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a membe

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent

OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the Sig

OpenZeppelin Contracts is a library for smart contract development. Versions 4.0.0 until 4.7.1 are vulnerable to ERC165C

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 ta

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log i

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules.

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.21.

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.

A vulnerability in the web-based management interface of Cisco IoT Control Center could allow an unauthenticated, remote

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an af

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on