2022

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insuff

The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plug

The Random Banner WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the cat

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting f

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting f

An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting fr

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 an

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 an

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 an

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in

The WHMCS Bridge WordPress plugin is vulnerable to Stored Cross-Site Scripting via the cc_whmcs_bridge_url parameter fou

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making qu

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of u

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowe

A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions

Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and

In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don

Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, w

Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while draft

Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows auth

IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injec

In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the T

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive informati

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw wa

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write acce

Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of t

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP fi

Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files w

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature fi

SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could u

There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that coul

SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection.

An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as exe

There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by