2022

A vulnerability classified as problematic has been found in OpenMRS Admin UI Module up to 1.4.x. Affected is the functio

A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic.

A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file src/

dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability.

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect Access Control. There

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

The dag-pb codec can panic when decoding invalid blocks.

A race condition can cause incorrect HTTP request routing.

The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a pot

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and Cry

Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resou

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed,

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to re

Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious ser

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the

CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an

Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of

LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code executio

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which wil

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbi

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software.  Users are grant

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add applicat

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. Af

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypas

Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall ac

Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the f

Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the

Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal

Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of a

Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of adm

Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of o

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the A

Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain t

Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain

Denial of Service in GitHub repository usememos/memos prior to 0.9.1.

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of t