2022

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerp

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation o

A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communic

The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenanc

An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version

An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 an

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affect

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problem

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.

The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow

The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in

The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks

The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.18.0 does not have proper authorisation checks

The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to bo

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privileg

Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a.

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is run

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the co

Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverif

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be ru

Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).

Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post.

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and t

PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at sou

A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to ex

An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to

This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specificatio

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative p

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdr

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sendi

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrago

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release call

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and

In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the

Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. I

An issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for the GrowthExperiments ext

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occu