2022

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploita

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission se

A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, whe

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayF

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a coc

Sensitive information could be displayed when a detailed technical error message is posted. This information could discl

Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge informa

Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a d

Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that cause

Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direc

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a dire

The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an appl

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an appl

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() i

An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Den

Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a De

abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c.

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Plat

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript

Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to

An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS oper

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspectio

Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing conf

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspectio

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enable

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows whe

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions p

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. Affected vers

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of co

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communica

Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can caus

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not v

An authenticated user can create a link with reflected Javascript code inside it for graphs’ page and send it to other u

An authenticated user can create a link with reflected Javascript code inside it for items’ page and send it to other us

An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other

Maddy Mail Server is an open source SMTP compatible email server. Versions of maddy prior to 0.5.4 do not implement pass

An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malic