2022

Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user sessi

Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may b

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Serv

A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which

Discourse is an open source platform for community discussion. In affected versions when composing a message from topic

containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or S

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in

IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could le

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;

Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;

In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has u

In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user

In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileg

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest p

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest p

Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.

A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Sof

A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail v

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be explo

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator gro

Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Djan

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityVal

Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and

Convos is an open source multi-user chat that runs in a web browser. You can't use SVG extension in Convos' chat window,

Convos is an open source multi-user chat that runs in a web browser. Characters starting with "https://" in the chat win

Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affec

CodeIgniter is an open source PHP full-stack web framework. Deserialization of Untrusted Data was found in the `old()` f

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via usersearch

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.p

OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an atta

Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of

Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipel

Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.

OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS

PJSIP is a free and open source multimedia communication library written in the C language implementing standard based p

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp

uppy is vulnerable to Server-Side Request Forgery (SSRF)

Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in

ws-scrcpy is vulnerable to External Control of File Name or Path

In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This cou

In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple

In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local info

In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to loca

In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local informa

In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of pri

In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local i