2022

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a

The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions u

The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_user_cover_default_image_

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack.

Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0.

nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via

Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML

Versions `<=8.5.1` of `jsonwebtoken` library could be misconfigured so that legacy, insecure key types are used for sign

Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. I

In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allo

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A

A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2

An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Projec

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenIm

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenIm

A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4

An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageI

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file dir

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.1

IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read b

IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain

IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allow

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object th

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files the

IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they are

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*:

By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user

The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a use

Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of t

If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server th

If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the brow

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers bei

Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. Cache-based timing

Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access

When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the Se

Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seein

Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free a

Through a series of popup and <code>window.print()</code> calls, an attacker can cause a window to go fullscreen without

Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for

If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may p

During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially ex