2022

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerabil

A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This is

A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the fil

A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the f

Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementat

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates u

An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4,

Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5

An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior

Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 all

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep op

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI pack

In AlwaysOnHotwordDetector of AlwaysOnHotwordDetector.java, there is a possible way to access the microphone from the ba

Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below.

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape th

A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated

IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of th

Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentic

Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB requ

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that pr

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that pr

In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings

In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that pr

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown fu

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this iss

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0,

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.

A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and belo

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Bi

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 an

A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9.

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with phy

This issue was addressed with improved entitlements. This issue is fixed in iOS 16, watchOS 9. An app may be able to rea

A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown pr

A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unkn

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting fr

Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Ne

A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by t

A vulnerability classified as problematic has been found in Ruby on Rails. This affects an unknown part of the file acti

A vulnerability, which was classified as problematic, was found in SourceCodester Sanitization Management System 1.0. Af