2022

StorSimple 8000 Series Elevation of Privilege Vulnerability

Microsoft Office Spoofing Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Event Logging Service Denial of Service Vulnerability

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Service Fabric Explorer Spoofing Vulnerability

Windows NTLM Spoofing Vulnerability

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.

A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registr

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Boos

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascr

Cloud Mobility for Dell Storage versions 1.3.0 and earlier contains an Improper Access Control vulnerability within the

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker co

Reflected Cross-Site Scripting (XSS) vulnerability FontMeister plugin <= 1.08 at WordPress.

IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to imp

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descr

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an erro

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of si

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions <

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions <

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions <

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Informatio

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a h

A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local a

The Advanced Comment Form WordPress plugin before 1.2.1 does not sanitise and escape its settings, allowing high privile

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_sl

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make

The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow

The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any a

The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow hig

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker c

IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated

The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog fold

The WP 2FA WordPress plugin before 2.3.0 uses comparison operators that don't mitigate time-based attacks, which could b

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its

The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in fr

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder

The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high p

The Disable User Login WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating its sett

A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series

A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalys

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cis

The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpw_setpage pa

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject a