2022

The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-c

Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions pr

Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlim

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-lik

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the rece

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit u

user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery u

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless serv

A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affec

Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions

A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple reques

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an

IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.

A vulnerability was found in iPXE. It has been declared as problematic. This vulnerability affects the function tls_new_

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function

A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.met

Multiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via

Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.

In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email address

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version

Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list.

A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an

Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicaliz

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedI

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePassw

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function

A cross-site request forgery (CSRF) vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delet

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account a

Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permi

Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permiss

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to in

Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account

Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permission

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a loc

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used b

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this v

A vulnerability was found in Frappe. It has been rated as problematic. Affected by this issue is some unknown functional

A vulnerability, which was classified as problematic, has been found in NukeViet CMS. Affected by this issue is the func

A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function g

A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown func

A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the fi

CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.

A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is so

Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an

Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable

Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to p

Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow