2022

Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfigur

There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DO

A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the alb

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames

An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the n

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthentica

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the appli

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient output encoding of user-supplied data, the

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal communications interface, it is pos

IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of speci

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retri

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is pos

An issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management services, arbitrary system com

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length val

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check fo

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username pa

Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length val

KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vul

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicaliz

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGF

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be r

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.

Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download

A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attacker

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/i

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary

The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malici

The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sop

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated a

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deseriali

A vulnerability, which was classified as critical, was found in Sports Club Management System 119. This affects an unkno

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown

A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an

A vulnerability classified as critical has been found in Hospital Management Center. Affected is an unknown function of

A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown proce

Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0.

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. OpenSearch allows users to specify a loc

HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services