2022

Bytecode Viewer (BCV) is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerabl

Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploitation requires administrator privileges

An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users h

An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a py

An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, whic

The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization,

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authen

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker w

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacke

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Window

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop.

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt.

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the Ch

Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings

crater is vulnerable to Unrestricted Upload of File with Dangerous Type

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings throu

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type,

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of

growi is vulnerable to Authorization Bypass Through User-Controlled Key

snipe-it is vulnerable to Missing Authorization

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard r

nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denia

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML supp

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Windows Defender Credential Guard Security Feature Bypass Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability