2022

The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local priv

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from whi

In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation.

In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead

In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escal

In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local

Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. Th

An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services

An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attacke

Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list.

Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versi

Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before ve

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a s

Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.

XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?pa

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to caus

A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage Application v1.0 allows atta

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.

Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue wh

A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an

A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some un

A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknow

An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP fi

kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.control

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Reques

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hos

IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 thr

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows use

The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authentic

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users w

BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP

Keyfactor EJBCA before 7.10.0 allows XSS.

A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-priv

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers t

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account.

Dreamer CMS 4.0.01 is vulnerable to SQL Injection.