2022

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix fi

As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" t

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices.

Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An a

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "

The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons,

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the c

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulne

Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.

A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows au

A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a priv

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IG

IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remo

The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious app

There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into t

An issue was discovered in Delta RM 1.2. It is possible for an unprivileged user to access the same information as an ad

An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary fi

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the s

There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the io

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (componen

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supp

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported ve

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). Supp

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Su

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Su

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versi

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API).

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acces

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affecte