2022

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language in

Tiny File Manager version 2.4.8 allows an unauthenticated remote attacker to access the application's internal files. Th

Frappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because th

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' p

Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. This vulne

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to exec

A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute ar

A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbi

A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute

An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak bec

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and late

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT De

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 V

A vulnerability was found in rickxy Stock Management System and classified as problematic. This issue affects some unkno

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability aff

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a z

Improper Input Validation vulnerability in Mitsubishi Electric GOT2000 Series GT27 model FTP server versions 01.39.000 a

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above c

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long back

A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to exec

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When the `reset

qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allow

pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStateme

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without t

org.xwiki.platform:xwiki-platform-oldcore is missing authorization in User#setDisabledStatus, which may allow an incorre

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to a

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads t

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp

Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT

This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests. This can lea

This vulnerability discloses build and services versions in the server response header.

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the du

The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.

The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied dat

A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitizati

A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course red

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function whic

A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large auto

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server vi

CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpo