2022

egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option o

Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11

cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL

FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an a

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users

Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119

Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could s

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6

There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current key

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController

IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vulnerable to cross-site scripting. This vulnerability allows us

In BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain sensitive information via the l

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker ca

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or cra

Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devic

An authenticated user can embed malicious content with XSS into the admin group policy page.

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to chan

ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS).

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under s

A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerabili

A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown funct

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is a

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affec

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Throu

PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem ac

Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In af

A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remo

Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extra

go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project.

tinymce is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in the alert and c

Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulne