2022

IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cau

IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker t

Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter.

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to b

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restr

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restr

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high a

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arb

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system k

WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an u

Authenticated (high role user) WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin <= 3.6.0 at WordP

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation I

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via th

The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port

Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user

IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, w

IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker t

IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite

Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress.

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insuff

OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file witho

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passw

An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a tru

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.

Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corru

Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit he

Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exp

Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially e

Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap

Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap

Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corru

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality.

This affects all versions of package node-import. The "params" argument of module function can be controlled by users wi

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users with

This affects the package properties-reader before 2.2.0.

This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that pars

This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses

This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx fo