2022

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerabil

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerabilit

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability ca

There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerrys

There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c

There is an Assertion ''ecma_object_is_typedarray (obj_p)'' failed at /jerry-core/ecma/operations/ecma-typedarray-object

Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c.

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of

Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local at

CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A cross-site scripting (XSS) vulnerabilit

elfspirit is an ELF static analysis and injection framework that parses, manipulates, and camouflages ELF files. When an

ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting (XSS) vu

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter i

An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, a

An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to ref

An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript c

An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to

An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is

Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS)

Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthentica

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root l

TeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open doors of Tesla vehicles,

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execu

Cross Site Scripting (XSS) in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) by oretnom23, allows attackers

Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, al

SQL injection in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) 1.0 by oretnom23, allows attackers to execu

Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers t

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to

SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An

Cross Site Scripting (XSS) in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute

SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.1

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbi

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tut

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows atta

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to e

Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id paramet

In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and parses it int

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outp

The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved v

The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id,

The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests l

The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in