2022

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a cras

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

Reflected cross site scripting (XSS)

Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU

A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through malicious

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability du

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth

Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious

Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows a

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied imag

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allow

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authe

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a r

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information d

A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could

A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary cod

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the

Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 a

An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data an

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers t

An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application.

An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary

CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicio

Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to ob

CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature.

Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of

Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capab

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_rele

A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and ol

A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remo

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files o

Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permissi

A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers t

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to co

Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able