2022

AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local use

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Af

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue aff

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic

A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affect

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated atta

An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker

OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can pe

An Improper Control of a Resource Through its Lifetime vulnerability in Packet Forwarding Engine (PFE) of Juniper Networ

An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Ne

A Path Traversal vulnerability in the J-Web component of Juniper Networks Junos OS allows an authenticated attacker to u

An XPath Injection vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker

An XPath Injection vulnerability due to Improper Input Validation in the J-Web component of Juniper Networks Junos OS al

A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated

An Allocation of Resources Without Limits or Throttling and a Missing Release of Memory after Effective Lifetime vulnera

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Ne

An Improper Authentication vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, network-b

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos O

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devices an Uncontrolled Memory Allocation vulnerability in the P

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networ

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Junip

On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping (P

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks J

Due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS an

A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved al

kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

xzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /admin/question/edit. T

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a differ

MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execut

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a differ

An attacker can pre-create the `/Applications/Google\ Drive.app/Contents/MacOS` directory which is expected to be owned

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function in

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_g

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the functio

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_r

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the compo

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology AB Press Optimizer plugin <= 1.1.1 on Wor

An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input

An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions fr

Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.

An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended form

An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 befor

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting fr