2022

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows physically proximate attackers to dump the firmware, fla

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to cause a Denial of Service (device o

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to change the time, date, and month vi

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious f

Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iN

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory de

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and i

Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II be

In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to c

In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=a

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Store

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicl

Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#

OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.

OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HT

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.

OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages.

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA

OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to

OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG

OX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ UR

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertD

A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the functi

A vulnerability classified as critical was found in SourceCodester School Dormitory Management System 1.0. Affected by t

A vulnerability classified as problematic has been found in SourceCodester Blood Bank Management System 1.0. Affected is

A vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown

A vulnerability was found in styler_praat_scripts. It has been classified as problematic. Affected is an unknown functio

A vulnerability has been found in Starcounter-Jack JSON-Patch up to 3.1.0 and classified as problematic. This vulnerabil

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unfla

A vulnerability was found in barronwaffles dwc_network_server_emulator. It has been declared as critical. This vulnerabi

A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection,

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs,

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and th

A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affec

A vulnerability classified as problematic was found in asrashley dash-live. This vulnerability affects the function read

A vulnerability classified as problematic has been found in cronvel tree-kit up to 0.6.x. This affects an unknown part.

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affec

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpath

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the fi

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unk

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to r

Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upl