2022

Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Se

x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text exp

x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text exp

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular r

The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL

The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures.

Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive inf

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.

Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This requ

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1. It has been rated as problematic. Th

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue af

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknow

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part o

A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of t

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unkn

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of th

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authentica

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Aff

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulner

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unk

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affe

Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5

A reflected cross-site scripting (XSS) vulnerability exists in the playerConfUrl parameter in the /defaultui/player/mode

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the d

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_recor

CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variab

Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in a

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the applicat

containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs in

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuth

Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authenti

Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request b

The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability t

Emlog Pro v 1.0.4 cross-site scripting (XSS) in Emlog Pro background management.

Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling

silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239