2022

If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so,

By generally accepting and passing resource handles across processes, a compromised content process might have confused

When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.

Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handlin

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have le

A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window s

Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerabi

When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the

When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potenti

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This

IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could a

When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both,

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the exis

After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and pote

<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on differ

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This coul

When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory cor

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a

In versions `<=8.5.1` of `jsonwebtoken` library, lack of algorithm definition in the `jwt.verify()` function can lead to

jsonwebtoken is an implementation of JSON Web Tokens. Versions `<= 8.5.1` of `jsonwebtoken` library can be misconfigured

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JA

A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted

An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9

A vulnerability was found in destiny.gg chat. It has been rated as problematic. This issue affects the function websocke

A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affe

The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2.

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerabili

A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SC

Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script coul

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PH

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate whe

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensit

A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the funct

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of th

A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown f

aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is som

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulne

Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to rea

A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of th

A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown p

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unk