2022

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary c

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.9

There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a r

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, una

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11 and below that may allow a remote, unauthent

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote rem

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote remo

In some non-default installations of Esri Portal for ArcGIS versions 10.9.1 and below, a directory traversal issue may a

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote, un

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8

Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Versions prior to 2.2.2

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testi

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function Val

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects t

A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown par

ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authent

A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of t

A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown proce

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of th

A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/pa

A vulnerability was found in HotCRP. It has been rated as problematic. Affected by this issue is some unknown functional

A vulnerability was found in Talend Open Studio for MDM. It has been declared as problematic. Affected by this vulnerabi

A vulnerability was found in simple_php_link_shortener. It has been classified as critical. Affected is an unknown funct

A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unkn

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The Authent

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has

A vulnerability was found in challenge website. It has been rated as critical. This issue affects some unknown processin

There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful expl

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker t

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access

There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the a