2022

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.

An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.

A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior an

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrust

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includin

The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1

The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including

A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could resul

The Button Widget Smartsoft plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl

The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_impo

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and

AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS a

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" priv

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated user

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauth

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow unrestricted file upload (and

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authen

In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a

ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC\-Sh

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when conn

Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.

An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malfo

An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line.

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary comm

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserial

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists w

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists w