2022

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.

Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack

There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndR

An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 via

IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to pro

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20

A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux versi

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) userna

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username para

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the adminis

An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe conc

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attribut

A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in reg

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.

Cross Site Scripting (XSS) vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter.

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” fea

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.

Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS

Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows a

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on D

Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.

In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a maliciou

In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF loa

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag

log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the f

Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0.

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSR

A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in

Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerabl

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally

Istio is an open platform to connect, manage, and secure microservices. In Istio 1.12.0 and 1.12.1 The authorization pol

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a su

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter

Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered in Email