2022

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet h

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has bee

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has bee

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Comp

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Sna

Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration us

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability vi

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a mal

Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP fil

Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version

There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability ma

Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions sett

Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypas

A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in m

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploit

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST reque

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST reque

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POS

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and param

SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0.

The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter

The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL sta

The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL stateme

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user wit

Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated at

In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Si

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects a

dynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php.

dynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php.

dynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php.

IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not inc

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side C

Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match()

The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures.

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5

Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in a

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the applicat

django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible t

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execut