2022

A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the

A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown p

A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the fil

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lis

A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functi

A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an un

A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the f

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the

Guzzle is an open source PHP HTTP client. In affected versions `Authorization` headers on requests are sensitive informa

Guzzle is an open source PHP HTTP client. In affected versions the `Cookie` headers on requests are sensitive informatio

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown par

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown fu

A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vuln

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an u

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unkn

A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability a

A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unkn

A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerabilit

A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function

Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method vulnerability that could allo

Trend Micro Security 2022 and 2021 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure vulnerabilit

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker wi

semantic-release is an open source npm package for automated version management and package publishing. In affected vers

The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the rem

Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to sen

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not inc

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data i

A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change th

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side C

Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 `DisplayName` does not filter charac

Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of t

If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.

Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.

Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.

Cross-site Scripting (XSS) - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0.

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.

Cross-site Scripting (XSS) - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0.

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a deni

Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match()

The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause th