2022

Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enab

Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remot

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upl

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(fo

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made fi

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Item Na

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table N

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaur

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in t

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for

A vulnerability was found in URVE Web Manager. It has been rated as critical. This issue affects some unknown processing

A vulnerability was found in URVE Web Manager. It has been declared as critical. This vulnerability affects unknown code

A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the f

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability

Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's respon

PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_product.

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=.

A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3ge

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a D

Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This allows attackers to acc

AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the c

The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit funct

Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lea

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.

Gradle is a build tool. Dependency verification is a security feature in Gradle Build Tool that was introduced to allow

The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation pr

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to in

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way u

A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info da

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (AC

@fastify/bearer-auth is a Fastify plugin to require bearer Authorization headers. @fastify/bearer-auth prior to versions

The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allo

The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported fi

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access s

IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be use

IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacke

IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker

IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extensio

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a speci

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header i

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitiv

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive infor

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor