2022

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and

A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Sto

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with lo

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability aff

Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin

Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress

Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image

totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password (TOT

GoCD is a continuous delivery server. In GoCD versions prior to 22.1.0, it is possible for existing authenticated users

This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodej

All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <=

GoCD is a continuous delivery server. GoCD versions 20.2.0 until 21.4.0 are vulnerable to reflected cross-site scripting

GoCD is a continuous delivery server. GoCD versions 19.11.0 through 21.4.0 (inclusive) are vulnerable to a Document Obje

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all input

Cilium is open source software for providing and securing network connectivity and loadbalancing between application wor

Cilium is open source software for providing and securing network connectivity and loadbalancing between application wor

Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function

WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtuse

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node,

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, i

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerabil

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.

Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sen

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, an

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of t

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered i

The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability

SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account)

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior

Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component

School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter

ChatBot Application with a Suggestion Feature 1.0 was discovered to contain a SQL injection vulnerability via the id par

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated a

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files corr

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected dev

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected dev

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenge

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with c