2022

In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit confi

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, po

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fil

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some s

IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the H

IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be ab

Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project na

Under certain conditions an attacker authenticated as a CMS administrator access the BOE Commentary database and retriev

In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default

In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or us

In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overf

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat

Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. During CI/CD builds, it is possible to save buil

Windows Graphics Component Information Disclosure Vulnerability

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Event Tracing Denial of Service Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. The Internet Relay Chat (IRC) protocol allows you

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions request

The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explic

An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpa

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 4

SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for th

An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Ser

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denia

The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could

Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with mom

Pal Electronics Systems - Pal Gate Authorization Errors. The vulnerability is an authorization problem in PalGate device

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the reco

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Pro

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this

A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resu

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerabilit

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in RD Station plugin <= 5.2.0 at WordPress.

Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i80