2022

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer under

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and i

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/io

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value o

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/em

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_un

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in chec

Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 ver

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API k

Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the cha

Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115

Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.

Under certain circumstances the session token is not cleared on logout.

Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding. The i

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbi

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before se

Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx. To exploit this vu

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec6185

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal.

A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid R

A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IO

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gai

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbi

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches c

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cau

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privi

A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services

A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticat

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unaut

A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform

A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, re

A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wirele

A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE W

A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Fami