2022

The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporari

A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO

A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning

Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.

A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has

A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupl

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of t

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of t

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parame

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parame

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write file

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of us

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write file

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passe

The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via

The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escap

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of t

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing a

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled w

A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file throu

A Site Scripting (XSS) vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly.

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It u

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN t

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in us

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue oc

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0.

A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.

A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf.cxx may lead to execute a

The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, una

The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticat

Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker coul

A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges

Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obta

Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a m