2022

Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watc

There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may all

A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecr

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/me

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description o

A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this v

A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the

A vulnerability was found in moappi Json2html up to 1.1.x and classified as problematic. This issue affects some unknown

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability a

A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the

The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could a

A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this iss

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is

LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of

efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing i

authentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, an

DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for inv

DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for inv

XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of servic

authentik is an open-source Identity Provider focused on flexibility and versatility. Versions prior to 2022.11.4 and 20

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in cloudsync. Affected by this vulne

Dragonfly is a Java runtime dependency management library. Dragonfly v0.3.0-SNAPSHOT does not configure DocumentBuilderF

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testi

A vulnerability was found in Widoco and classified as critical. Affected by this issue is the function unZipIt of the fi

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function add_public_key

A vulnerability was found in OpenMRS Admin UI Module up to 1.4.x. It has been rated as problematic. This issue affects s

A vulnerability was found in OpenMRS Admin UI Module up to 1.5.x. It has been declared as problematic. This vulnerabilit

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unk