2022

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to ho

In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/fil

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to ho

BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in thei

BigBlueButton is an open source web conferencing system. Users in meetings with private chat enabled are vulnerable to a

Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subje

Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.3.0 a

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.0.0 a

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows a

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key excha

A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue af

A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an un

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored usin

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Sup

The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable va

In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array<AP4_TrunAtom::Entry>::EnsureCapaci

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject ar

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-leve

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartIC

When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will caus

When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter b

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it wil

When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it wil

When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three,

When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater tha

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operator

When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.

A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functiona

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the

A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some

Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating c

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5 when validating crafted in

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git-downloader v0.1.1 when downloadi

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1.2.0 when copying craft

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to-chars v1.0.5 when splitting

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3 when validating crafted

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted i