2022

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an erro

Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linu

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage S

Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe compon

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix pr

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve info

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the fun

A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the func

Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to u

Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote att

An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a sce

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail.

pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __san

tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitS

timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-quer

rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h.

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue i

The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow hig

The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attr

The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, w

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allo

The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow hi

The WP Contact Slider WordPress plugin before 2.4.8 does not sanitize and escape its settings, allowing high privilege u

The WP Total Hacks WordPress plugin through 4.7.2 does not prevent low privilege users from modifying the plugin's setti

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via

The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outp

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via

A vulnerability, which was classified as critical, has been found in easyii CMS. This issue affects the function file of

A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /in

ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).

ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vul

Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user priv

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user pri

U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote at

U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attack

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker c

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can e

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can e

U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vu

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resu

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resu

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resu