2022

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Inf

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported ver

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is aff

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manage

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported v

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version

Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server. For supported ve

Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported ve

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications

Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a spec

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in th

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scrip

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call.

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_infla

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse elemen

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bz

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gs

Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi fi

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite w

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT styleshee

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module

Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command exec

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to c

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injectio

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions

A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all ve

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attacker

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recove

A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 m

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV.

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2,

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager ve

An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 throug

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerabi

A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 t

HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.

HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.

Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_v

Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_value_to_number at src/njs_value_conversion.

Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_djb_hash at src/njs_djb_hash.c.

Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h.

Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njs_value_property at njs_value.c.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.