2022

XWiki Platform Attachment UI provides a macro to easily upload and select attachments for XWiki Platform, a generic wiki

The XWiki Platform Index UI is an Index of all pages, attachments, orphans and deleted pages and attachments for XWiki P

XWiki Platform Web Parent POM contains Web resources for the XWiki platform, a generic wiki platform. Starting with vers

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) o

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the dis

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 14.2 and 13.10.

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/de

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /interv

bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but sto

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. Through the suggestion feature,

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Prior to versions 13.1.0.5 and 14

Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `Wit

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated,

Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/a

OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 al

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker

OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allow

Undocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2 firmware versions prior

Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS com

The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configure

The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthent

FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function.

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote

KubeVela is an application delivery platform Users using KubeVela's VelaUX APIServer could be affected by an authenticat

linked_list_allocator is an allocator usable for no_std systems. Prior to version 0.10.2, the heap initialization method

Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when access

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Internal fields

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a K

A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown par

RubyGems.org is the Ruby community gem host. A bug in password & email change confirmation code allowed an attacker to c

Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes vario

Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a regis

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0

Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall ol

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command exe

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to

D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulne

Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20.

In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to f

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

XWiki Platform Security Parent POM contains the security APIs for XWiki Platform, a generic wiki platform. Starting with

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0

ActivityWatch open-source automated time tracker. Versions prior to 0.12.0b2 are vulnerable to DNS rebinding attacks. Th

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse.

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to