2022

In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to inn

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user w

A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability

A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unkn

A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the co

A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulne

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md"

Joy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote attackers to jam the key

The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Code Injection in GitHub repository getgrav/grav prior to 1.7.34.

RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of

A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the f

A vulnerability was found in TrueConf Server 4.3.7. It has been rated as problematic. Affected by this issue is some unk

A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability

A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown functi

A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown proces

A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic. This vulnerability affects unknow

A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part.

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19.

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an o

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perf

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file.

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file.

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes wi

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cac

CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wr

CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribu

A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue

A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an un