2022

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\empl

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\sche

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\over

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\dedu

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cash

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\atte

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\sche

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\posi

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\sche

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\over

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\atte

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\atte

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cash

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\empl

Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?se

The Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation fails to include all of

ACS Commons version 5.1.x (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in /apps/acs-c

Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running System FW <= 1.13.1.6, an

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page sour

<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible t

A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authentica

A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified C

A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Sof

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni

A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified C

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM &amp; Presence Service

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Ci

A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an un

A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager (VIM) could allow an a

The Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the generation of a classification l

Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when usi

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ing

The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and includ

Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity d

A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of th

Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum wh

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does n

A improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not v

Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to 3.0.0 beta3 a malicious script c

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.

Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to beta6 the `ajax.render.php?opera