2022

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of

A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. T

A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils o

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdi

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add

A vulnerability was found in dolibarr_project_timesheet up to 4.5.5. It has been declared as problematic. This vulnerabi

A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. Affecte

A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic.

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the functi

A vulnerability was found in moodle-block_sitenews 1.0. It has been classified as problematic. This affects the function

A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unkno

A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects t

A vulnerability classified as problematic was found in Nagios NCPA. This vulnerability affects unknown code of the file

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file f

A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up t

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown

A vulnerability was found in FreePBX voicemail. It has been declared as problematic. Affected by this vulnerability is a

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function o

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of t

A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function Resource

A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerabili

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown f

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown functi

A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-p

Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL

The console in Togglz before 2.9.4 allows CSRF.

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthen

The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x be

The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1

In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configur

HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task duri

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Force

A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown f

Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can

A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to pe

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an