2022

Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attacke

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers t

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which c

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br

A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnera

A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affec

A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some u

A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerabil

A vulnerability, which was classified as problematic, was found in Movie Ticket Booking System. Affected is an unknown f

A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects som

A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in Kakao PotPlayer. This affects an unknown part of the compone

An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to

Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C74311

ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE).

ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vul

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrato

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via t

discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rend

Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that all

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the por

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affe

Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated

Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to rea

SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scriptin

Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An

Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual

In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cr

A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue

Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rati

Cross-Site Request Forgery (CSRF) in AdRotate Banner Manager Plugin <= 5.9 on WordPress.

The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince

The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected b

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected i

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595. This issue

A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affect

An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This all