2022

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to d

A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key a

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker t

Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all c

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and

In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53,

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this

There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulne

superjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.

All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A re

An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. I

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not

Out-of-bounds Read in Homebrew mruby prior to 3.2.

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration informatio

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable a

Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrar

A Use of Hardcoded Credentials vulnerability exists in AquaView versions 1.60, 7.x, and 8.x that could allow an authenti

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (avail

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending

A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input

An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/u

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Auth

CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a lo

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on ea

perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().

The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to ach

The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and e

Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions <= 0.15.

A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc. SeaC

A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc. SeaConnect 370W v

A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc. SeaConnect

A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute ar

Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allo

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administra

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalat

iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the functio

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the functio

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the functio

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the functio

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the functio

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebM

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This v

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSettin