2022

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot

A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive info

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows tha

A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticat

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that e

An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalP

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo

PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are block

Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.ph

A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote un

Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.

Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sens

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It

A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or O

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communic

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communic

A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the ser

A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a spe

A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a s

A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends

A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of serv

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to d

Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header wh

Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file

Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organi

A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key a

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions,

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker t

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch

A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to th

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modific

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Busi

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for ht

Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all c