2022

Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted po

Measuresoft ScadaPro Server (Versions prior to 6.8.0.1) uses an unmaintained ActiveX control, which may allow an out-of-

An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 a

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /a

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering Sys

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting.

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCf

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList.

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A loca

Dell Command | Integration Suite for System Center, versions prior to 6.2.0, contains arbitrary file write vulnerability

In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-boun

The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authe

An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is cal

A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple ca

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 s

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of pr

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of ser

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unre

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code

AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to preven

AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cau

A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable pe

Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted p

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is ma

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowi

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packe

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's cho

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause o

An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automa

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX

Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's han

An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string lar

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

Use After Free in GitHub repository vim/vim prior to 9.0.0322.

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacki

Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows authenticated attacker

Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to

Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authentic

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenti

Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticate

Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries. A remote au

Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authentic

SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker

An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below com

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which