2022

An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC

An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC

An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136

A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0.

An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20

A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-cra

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafte

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-cr

A privilege escalation vulnerability exists in Advantech SQ Manager Server 1.0.6. A specially-crafted file can be replac

Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server ex

Configuration vulnerability in Hitachi Energy LinkOne application due to the lack of HTTP Headers, allows an attacker th

Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and re

Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions <

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and c

HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successf

Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plug

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker

A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that

A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward req

A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modific

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Servic

A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affec

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists whic

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 con

A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configur

A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 con

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to

A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or

A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or

Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand i

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that allows attackers to injec

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmw

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a

A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foregroun

SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.