2022

Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo.

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.

Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule.

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.

Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all dat

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticat

PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected devi

DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.

Discourse is an open-source discussion platform. In version 2.8.13 and prior on the `stable` branch and version 2.9.0.be

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary

Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to

Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permi

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system s

D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function.

An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitr

D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function.

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MP

In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel.

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings.

Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the

IXPdata EasyInstall 6.6.14725 contains an access control issue.

Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authen

Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, a

Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no pas

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths ar

An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improp

IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticate

IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A loca

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall relea

A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in

A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database conten

A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sopho

A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older tha

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname int

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which c

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknow

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Contr