2022

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitr

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a che

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a che

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` m

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an atta

/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP ec

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System

https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb53830

IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient

IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper inp

IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure

File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafte

https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The a

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin pan

jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a f

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel

BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new u

BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.

In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs coul

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscal

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unche

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft

SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/publi

SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the functio

SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must brows

Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.

Apache Karaf allows monitoring of applications and the Java runtime by using the Java Management Extensions (JMX). JMX i

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SL

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device vi