2022

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulne

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payl

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php an

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-b

In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a differe

In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access

The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate pass

countly-server is the server-side part of Countly, a product analytics solution. Prior to versions 22.03.7 and 21.11.4,

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in r

A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE ha

The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of speci

The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a

The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in a

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrar

cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a us

In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.

In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling whi

Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on Wo

Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPr

A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has prov

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-f

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consum

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where the memory

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacke

Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level c

Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level command

Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into

A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provid

Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented Sy