2022

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bi

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fil

An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client con

Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude patt

Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to ac

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a rem

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an exte

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the t

ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in shows

ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.

ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 par

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext with

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentia

Use After Free in GitHub repository vim/vim prior to 8.2.

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect r

A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers s

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacke

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed wit

A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SE

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating s

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-fre

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_ge

A format string vulnerability was found in libinput

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remot

EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This a

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a

A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged

An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cau

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package,

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an at

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when

TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() locate

An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_Defin

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located i

An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_Defi

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() lo

An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allo

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() l

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() loc