2022

PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.

An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service

The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi compo

Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vul

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_p

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linkin

v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular express

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerab

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitab

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0.

Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for

Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to exe

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the d

The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet wit

The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js.

This affects all versions of package node-latex-pdf.

This affects all versions of package curljs.

This affects all versions of package s3-kilatstorage.

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname pa

graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.

Rust-WebSocket is a WebSocket (RFC6455) library written in Rust. In versions prior to 0.26.5 untrusted websocket connect

Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions a

OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor tha

DSpace open source software is a repository application which provides durable access to digital resources. In affected

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui

CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were foun

Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injec

Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resu

laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP messa

IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.

File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the fil

An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI (Mango) 4.1 allows attackers to escal

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upl

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of

In cta, there is a possible way to write permission usage records of an app due to a missing permission check. This coul

The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editi

The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which cou

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-si

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with a