2022

Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivilege

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return valu

The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deacti

BigBlueButton is an open source web conferencing system. Versions prior to 2.4.3 contain a whiteboard grace period that

In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administra

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6, and 2.5-alpha-1 contain Incorrect A

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans

The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to

BigBlueButton is an open source web conferencing system. Versions prior to 2.4.3, are subject to Insufficient Verificati

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough infor

Alist v3.4.0 is vulnerable to Directory Traversal,

An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267

Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled p

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled p

A vulnerability was found in collective.task up to 3.0.8. It has been classified as problematic. This affects the functi

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is som

A vulnerability has been found in National Sleep Research Resource sleepdata.org up to 58.x and classified as problemati

A vulnerability, which was classified as problematic, was found in Roots soil Plugin up to 4.0.x. Affected is the functi

A vulnerability, which was classified as problematic, has been found in vexim2. This issue affects some unknown processi

A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code.

A vulnerability classified as problematic has been found in WSO2 carbon-registry up to 4.8.6. This affects an unknown pa

A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue

The WP User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up

A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an un

A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This

A vulnerability has been found in RainyGao DocSys and classified as critical. Affected by this vulnerability is an unkno

A vulnerability classified as problematic has been found in chbrown rfc6902. This affects an unknown part of the file po

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be ab

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, m

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, m

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.1. An

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, m

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Wi

A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, m

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16

A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macO

A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or H

Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) has a Weak password vulnerability.

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) is vulnerable to Cross Site Scriptin

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, mac

The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura