2022

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior

Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direct

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitr

A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does

The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated reflected XSS vulnera

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosur

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on A

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer

Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAto

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the functio

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_Sts

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided c

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6, it was po

The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request For

A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unkn

A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allo

Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-160

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation managemen

The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdow

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client t

An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0c

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user

SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use t

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy

OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.

An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads t

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes th

A vulnerability in the MiCollab Client API of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to

The WP Humans.txt WordPress plugin through 1.0.6 does not sanitise and escape some of its settings, which could allow hi

The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow h

The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could all

A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept th

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJA

The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible f

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT fi

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT fi

Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software

@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis