2022

Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.

Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer o

A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escal

A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability m

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow ar

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password

A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows at

Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resu

Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credential

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inse

Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is le

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou

Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows

A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmwar

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph

Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph

IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is vulnera

A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the

Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Networ

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire cred

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to ac

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.

SENS v1.0 has a file upload vulnerability.

SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.

SENS v1.0 is vulnerable to Cross Site Scripting (XSS).

Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page.

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. Thi

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization

Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

A vulnerability classified as critical was found in SourceCodester Canteen Management System. This vulnerability affects

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the co

A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing o

A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unkno

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown f