2022

An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow an unauthentica

An Execution with Unnecessary Privileges vulnerability in Management Daemon (mgd) of Juniper Networks Junos OS Evolved a

An Access of Uninitialized Pointer vulnerability in SIP Application Layer Gateway (ALG) of Juniper Networks Junos OS on

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS on SRX Series allo

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Forwarding Engine (PFE) of Juniper Network

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or

An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks

On SRX Series devices, an Improper Check for Unusual or Exceptional Conditions when using Certificate Management Protoco

A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Packet Forwarding Engine (P

An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolve

Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalat

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web ap

Open Source SACCO Management System v1.0 is vulnerable to SQL Injection via /sacco_shield/manage_payment.php.

Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/upd

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write a

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access c

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when

HIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command source. As a result, an

Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the r

Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability.

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions s

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an a

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, 15.2 to 15.2.4 an

An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerabilit

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of ce

Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers

A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. Thi

A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventor

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before u

The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a

The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQ

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are

An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.

socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffe

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validatio

Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Bu

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.

Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Bu

Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code executi