2022

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications.

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.5.0 but before

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 1.3.0 but before

ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_te

An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execu

A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c

A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUn

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exi

Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers with c

Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to tri

Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=tra

Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/

Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a us

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execut

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execut

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execut

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command inj

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause impr

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another i

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient in

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw all

The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the l

The Photoswipe Masonry Gallery WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and s

A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found i

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or

An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a speci

A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker wi

A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock op

A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocol

An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserializ

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccw

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre

The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may all

A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre

The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking p

A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCen

The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacki

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deseriali

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-