2022

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLangu

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbit

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbit

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbit

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

LoRaMac-node is a reference implementation and documentation of a LoRa network node. Versions of LoRaMac-node prior to 4

MyBB is a free and open source forum software. The _Mail Settings_ → Additional Parameters for PHP's mail() function mai

PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJ

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application,

A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installatio

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulne

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption

Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploit

A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could

A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnera

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autod

A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write b

Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. Thi

A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Materi

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.

Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to ren

Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitiv

DedeCMS 5.7.98 has a file upload vulnerability in the background.

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeseriali

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of

### Impact In a CSRF attack, an innocent end user is tricked by an attacker into submitting a web request that they did

If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbit

A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow

A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Softw

A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Ci

A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst

A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Cataly

A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevat

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privil

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow a

RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI inst

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app u

Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via