2022

The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause inf

The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bo

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpa

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup sub

OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softb

Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of se

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take sign

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable param

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to

Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with 5.10.6 and prior to 5.12.0 contains a debug

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. Thi

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to in

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.

Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Manageme

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer ov

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before

Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version

Istio is an open platform-independent service mesh that provides traffic management, policy enforcement, and telemetry c

Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<

SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST reque

node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypa

Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the co

Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the co

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezon

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number p

Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function

Tenda AC1900 AP500(US)_V1_180320(Beta) was discovered to contain a buffer overflow in the 0x32384 function. This vulnera

Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x4a12cc function

Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47c5dc function

Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47de1c function

Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x475dc function.

Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated wit

WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send craft

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filter

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web

powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain

In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavata

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening craft

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service l

Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.10001