2022

Torguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such as credentials and inf

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbi

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbit

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute

An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to write arbitrary files to t

An issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator v1.0.1808.0901 allows attackers to c

PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.

cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged

indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In v

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserF

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and downloa

aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application do

aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability th

aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Ac

In network service, there is a missing permission check. This could lead to local escalation of privilege with no additi

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission contro

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress.

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"),

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the pr

UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode i

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisio

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the compo

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the compo

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the compo

Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid paramete

XWiki Platform Mentions UI is a user interface for mentioning users in wiki content for XWiki Platform, a generic wiki p