2022

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.

Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privil

Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, whic

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the current

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blackli

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest par

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whiteli

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_le

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_

A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script. Affected by thi

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.5, macOS Big Su

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a u

An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can c

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user als

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session d

A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panic

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. D

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory lo

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files wit

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery o

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out

A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local user

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when

In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This co

In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could

An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.logi

de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC.

Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-ad

Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel

The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote at

The Remote Keyless Entry (RKE) receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform

The Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmoun

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmoun

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is calle

A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable a

ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality.

ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performanc

Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration fi

Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Confi

Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log