2022

IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vu

A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrust

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includin

The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untru

The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1

The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and includi

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 d

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20

The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and rev

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter

The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including

A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could resul

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent fo

The Button Widget Smartsoft plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl

The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_impo

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiP

An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x;

Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vul

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and

AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104

Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component,

Directory listing is a web server function that displays the directory contents when there is no index file in a specifi

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.

The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS a

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" priv

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated user

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauth

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote atta

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow unrestricted file upload (and

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects un

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authen