2022

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, m

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPa

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in mac

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parame

Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the co

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_acti

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorde

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.ph

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorde

Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions R

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and bel

Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corr

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that

An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to acc

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forge

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthen

phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authenticati

A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown fu

A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown pr

A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of th

A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /

A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknow

A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functiona

A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/

A vulnerability was found in eolinker apinto-dashboard. It has been rated as problematic. This issue affects some unknow

When users add resources to the resource center with a relation path will cause path traversal issues and only for logge

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attac

open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows

open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.

An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbi

A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to e

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execu

A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers

Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purch

A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute

A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows attac

A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows at

A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a gu

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple

Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbu