2022

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4_MemoryBy

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the fun

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown funct

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::Write

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list

A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical. Affected

Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untr

A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inj

In Apache Linkis <=1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code

Winter is a free, open-source content management system based on the Laravel PHP framework. The Snowboard framework in v

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices cou

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail system

baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execu

Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to proce

A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow

A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local

A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remo

Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allo

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan

A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attack

A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. T

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue af

The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a databas

The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with

The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using

The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape

Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulner

kartverket/github-workflows are shared reusable workflows for GitHub Actions. Prior to version 2.7.5, all users of the `

GitHub Actions Runner is the application that runs a job from a GitHub Actions workflow. The actions runner invokes the

Free5gc v3.2.1 is vulnerable to Information disclosure.

Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerabili

Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vuln

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode S

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode S

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode S

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode S

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-