2022

Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /repo

An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document

An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permis

Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor.

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a mal

Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP fil

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-control

Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerab

An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cook

An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings.

An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during

Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor.

Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerab

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRout

Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version

There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause d

There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability ma

There is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful exploitation of this vuln

Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions sett

Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypas

A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: pos

A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in m

DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 ve

Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrus

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel.

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: userna

Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATE

Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploit

The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect

Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the av

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of th

Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect

kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf clus

Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of thi

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may af

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause dis

The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerab

The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privileg

AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affec

The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data co

The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confiden

The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulner

The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system ava

The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST reque

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST reque

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POS

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST