2022

IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a re

IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a

Off-by-one Error in GitHub repository v2fly/v2ray-core prior to 4.44.0.

Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not pro

Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute a

A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an u

A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthentic

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cis

Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.

Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.

Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.

OpenMRS is a patient-based medical record system focusing on giving providers a free customizable electronic medical rec

Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cl

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions Envoy does

Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc impleme

Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will seg

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when s

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a

Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated resp

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted r

Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `i

Wiki.js is a wiki app built on Node.js. In affected versions an authenticated user with write access on a restricted set

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack

A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains an out

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library use

Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress pl

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection v

Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protecti

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file inc

Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allo

A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An