2022

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missin

All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing handler for failed c

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA

All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing limitation on the nu

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number

OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive inf

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multipl

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack m

Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2S

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An atta

A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev ma

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown p

A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafte

An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted

D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is re

The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 all

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before insertin

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary f

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the

The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, makin

The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PH

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allo

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby pa

A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password t

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled.

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/

Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system c

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.

Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This all

A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or w

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an atta

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c fi

MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion.

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitra

Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC resul

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value cla