2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with a

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A m

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions start

When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpSer

Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML securit

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table per

Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation

A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this

A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown funct

Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6.

The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.

Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a loc

PolicyController is a utility used to enforce supply chain policy in Kubernetes clusters. In versions prior to 0.2.1 Pol

do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL wi

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol imple

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In affected versions it is possible to ca

The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to tr

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the S

cosign is a container signing and verification utility. In versions prior to 1.10.1 cosign can report a false positive i

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, a

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a

In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when the Message Routing (M

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is co

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, whe

In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing th

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access poli

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, whe

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS mi

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can explo

OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploi

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of th

A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3,

TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of pr

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occ

A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and

PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, datab

Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication

This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentica

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro

D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.

An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application

In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a