2022

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information t

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL

Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce

The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input na

Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticate

SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs,

The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functiona

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnera

Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process commun

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows a

SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Sched

YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page ca

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to in

An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL

An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL function

The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation.

Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can rea

Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would othe

Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an

Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILT

A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arb

Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pfS

Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an

In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of p

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local esc

In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local

In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could le

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an atta

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. Fo

libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Ser

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid request

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linu

Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG