2022

Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated use

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a c

tiny-csrf is a Node.js cross site request forgery (CSRF) protection middleware. In versions prior to 1.1.0 cookies were

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a c

In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service w

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to rem

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local esca

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=.

An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Managemen

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/ad

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/ad

An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Su

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Executi

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management Sys

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providi

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond th

A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploite

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Imag

A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond a

IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by imp

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could res

Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write a

Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers

A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based offi

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0.

Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /lea

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciousl

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser para

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter i

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, a

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parame

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.

Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input ma

A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exh

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort pa