2022

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementatio

Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of ser

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedI

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePassw

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function

Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in u

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code vi

Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of

SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrust

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/th

An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows at

Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker,

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed

Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitiv

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.

Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memor

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization

In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in pro

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM

Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTT

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an u

A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticat

A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and F

A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defens

Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multipl

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo

A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC)

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authe

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Def

A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an a

A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an a

A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Soft

Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multipl

A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adapti

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Thre

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could