2022

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f.

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567.

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this iss

In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stac

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could

Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Au

Knowage is an open source suite for modern business analytics alternative over big data systems. KnowageLabs / Knowage-S

Grafana is an open source data visualization platform for metrics, logs, and traces. Versions prior to 9.1.8 and 8.5.14

Grafana is an open source observability and data visualization platform. Starting with version 5.0.0-beta1 and prior to

A cross-site scripting (XSS) vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts

A Cross-Site Request Forgery (CSRF) in MQTTRoute v3.3 and below allows attackers to create and remove dashboards.

Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.

Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.

Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114

Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.

October is a self-hosted Content Management System (CMS) platform based on the Laravel PHP Framework. This vulnerability

Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerab

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.

A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerabil

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change

RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function.

A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experienc

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c.

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c.

In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure D

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects a

A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by

A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected

A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affect

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command

HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL

In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the

In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a phone parameter that is v

In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to R

An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror attribute of an IMG element, le

Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user cou

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially ex

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privilege

Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function f

Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function T

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fr

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fr

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll un

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality