2022

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applica

py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to r

An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first mak

Contract Management System v2.0 contains a weak default password which gives attackers to access database connection inf

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset dur

An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values take

Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulne

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integrati

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Ser

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integra

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the at

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some

The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote a

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affec

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vu

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Inte

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Re

DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.

DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.

Use After Free in GitHub repository vim/vim prior to 9.0.0221.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returne

A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_pro

An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissi

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions f

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon.

OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authent

Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEReso

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.

XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc

XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/san

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, T

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode.

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sanitizer_comm

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30().

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char).

PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improp