2022

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scrip

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call.

The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (appl

A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL =

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_infla

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse elemen

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bz

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gs

Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi fi

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite w

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function a

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT styleshee

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module

The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for

Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially be

Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command exec

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously.

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vuln

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SS

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to c

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery whic

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injectio

In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions

A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all ve

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.

BigFix Web Reports authorized users may see SMTP credentials in clear text.

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attacker

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recove

If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Inte

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Acces

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users

Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3

A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 m

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV.

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2,

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager ve

An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 throug

A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerabi