2022

A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function g

A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown func

A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of

A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affe

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/

A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the fi

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted cha

SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, w

Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl fi

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerabilit

A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a m

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of t

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL I

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL I

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege esca

Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege esca

CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.

CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privil

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory brows

Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.

OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via E

Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encryp

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0,

IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbit

IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allo

IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a d

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly con

A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is so

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_pr

A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the compo

A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may al

Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version

Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini

Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before versio

Unquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before

Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 bef

Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mi

Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may

Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privilege

Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before vers

Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow

Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may all

Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an

Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potent

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Min

Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may all