2022

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition w

The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a d

XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Re

TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execu

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET req

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking

A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, rem

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use

Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDocker

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limita

The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login a

GoCD is a continuous delivery server. Windows installations via either the server or agent installers for GoCD prior to

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Setting

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1

Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at auditlog.php.

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Settings page under

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto

mangadex-downloader is a command-line tool to download manga from MangaDex. When using `file:<location>` command and `<l

Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the att

Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies

A vulnerability was found in codeprojects Online Driving School. It has been rated as critical. Affected by this issue i

The Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive Information. According to F

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerab

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnera

ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing

A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local a

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backpo

Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component A

Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. The attacker and victim must follow

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Ou

SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobv

Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts us

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between

Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending maliciou

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potent

Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javas

Discourse-Chat is an asynchronous messaging plugin for the Discourse open-source discussion platform. Users of Discourse

Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate autho

IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administ

PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers wi

ReactPHP HTTP is a streaming HTTP client and server implementation for ReactPHP. In ReactPHP's HTTP server component ver

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM a