2022

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function r

Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youtha

Food Ordering Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the compone

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Por

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (Wi

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the co

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could

Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows loca

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php

An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learnin

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit paramete

A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attacke

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third part

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third par

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below.

When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However

Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated priv

Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fl

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks,

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks,

The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using

The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries a

The Highlight Focus WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow hi