2022

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy.

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /ad

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.ph

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to acce

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresenc

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the

A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If explo

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resu

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Downlo

Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it wil

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inco

There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.

In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.

In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.

sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logi

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c me

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs

In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with v

XWiki Platform Wiki UI Main Wiki is a package for managing subwikis. Starting with version 5.3-milestone-2, XWiki Platfo

XWiki Platform Flamingo Theme UI is a tool that allows customization and preview of any Flamingo-based skin. Starting wi

An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Softw

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V

An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Softwar

A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Pl

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications fu

An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation So

An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Sof

A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allow

Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middlewar

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on co

In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.

In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal.

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at Wo

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to se