2022

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the er

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membe

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-code

On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `gi

next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted.

Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or sy

Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 w

Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow

The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM be

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQ

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQ

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows a

Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress al

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFT

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supp

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affecte

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affecte

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gatewa

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Suppor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Uplo

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructur

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastr

Vulnerability in the Oracle Banking Treasury Management product of Oracle Financial Services Applications (component: In

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supp

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Su

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Supported ver

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Attachments). The supported version tha

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The sup

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).