2022

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values bei

A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-le

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c

A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classl

A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while

A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the pa

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segme

A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deploymen

The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly s

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the par

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstnam

mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add u

mm-wiki v0.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the markdown editor.

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retriev

Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could

A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that

A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacke

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An atta

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulner

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file.

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c.

An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O

An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mac

An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary comma

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15

A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15)

Cross-Site Request Forgery (CSRF) vulnerability in SEO Scout plugin <= 0.9.83 at WordPress allows attackers to trick use

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values fre

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enoug

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of prop

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability

A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwo

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a

A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted

Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreS

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution