2022

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below,

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use t

IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting.

IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of suppo

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the We

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the

Due to insufficient input validation, SAP Employee Self Service allows an authenticated attacker with user privileges to

SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authent

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data

Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.

During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encod

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a den

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a den

It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions fro

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting fr

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting fr

Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 pri

Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair featu

A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, l

A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitra

There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote

There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote atta

The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to obtain sensitive data

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Managem

An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allo

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Ma

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Manageme

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in t

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in t

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS) vulnerability in the test para

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup param

Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to

Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username a

Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=res

Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap.

An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary fi

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in Fo