2022

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs

Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations

Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When

Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might n

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text exp

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an erro

Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a w

If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to igno

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows,

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStr

Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linu

Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analy

Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds

Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially explo

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage S

Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe compon

In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible t

lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object dest

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /adm

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /adm

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix pr

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation

The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with u

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user

The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be

The application was vulnerable to a session fixation that could be used hijack accounts.

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve info

The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode

The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functio

The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the user profile data fields, w

The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messa

SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web applicati

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the fun

A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the func

A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unkn

The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vul

Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student as

Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to u

Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access r