2022

Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter.

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.

Auto Spare Parts Management v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search pa

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) a

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners C

Event Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the full_name p

VIewComponent is a framework for building view components in Ruby on Rails. Versions prior to 2.31.2 and 2.49.1 contain

A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through inva

In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default config

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePool

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it whe

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal val

The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix p

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certif

A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to exe

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request,

A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() i

A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to ex

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow

JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all

JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low-privileged user is able to de

Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F

Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aru

An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Arub

Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aru

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.

Zulip is an open source team chat app. The `main` development branch of Zulip Server from June 2021 and later is vulnera

VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as th

Excel-Streaming-Reader is an easy-to-use implementation of a streaming Excel reader using Apache POI. Prior to xlsx-stre

seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php.

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.6, and Liferay DXP 7.0 before fix pack 101, 7.1 befo

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a

Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and be