2022

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the f

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?ms

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers

In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing.

In Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is able to schedule downtime

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address.

In Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to inject HTML tags that

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR

Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applica

Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's pas

Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to b

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website co

Silverstripe silverstripe/framework through 4.10 allows Session Fixation.

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack vi

A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTM

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php.

Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending

Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.

Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.

Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more

Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For

Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptio

Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more

Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For m

Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A remote unprivileged mali

Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator coul

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of `underscore.deep` prior

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder.

A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP.

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previe

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This

piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without e

Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a ma

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker coul

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files

An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thou

Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which ma

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CE