2022

A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read p

A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attack

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with

A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier

Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configurati

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoin

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth cons

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images”

Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.

In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) hea

A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profil

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Ma

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is th

A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vu

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments l

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issu

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. Thi

A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vul

A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are mu

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. A

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection<

A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads t

NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows at

DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit

An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2bord

In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial excha

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages.

NUUO v03.11.00 was discovered to contain access control issue.

An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functio

An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter.

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of infor

A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific maliciou

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf()

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.

C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user

A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote m

A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote ma

A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a

A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote m