2022

In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of th

In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded sh

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_ac

A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers

A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows a

A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts o

A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or H

Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.

In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet co

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet co

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet co

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap u

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mim

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing s

Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.

An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x bef

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be perf

Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had c

Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr

Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit he

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially e

Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr

A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web s

Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 co

ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them

SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauth

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywh

Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to in

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi

Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D

Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with

SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting

SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attack

In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated atta

An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supp

@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a spe

Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earli

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Win