2022

A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enum

Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a s

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers wit

Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing att

A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to co

Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to acce

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library which has a buffer overflo

Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories s

Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositorie

Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories st

A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier al

Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath

The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scrip

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the F

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.

cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file informa

cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script f

Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrar

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.

In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realDa

A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certific

A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is re

A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

A remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba ClearPass Policy Manager

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and bel

A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and bel

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and bel

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deplo

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges.

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisa

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisv

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to exec

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attac

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lea