2022

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webse

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links vi

Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that pro

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vul

Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation se

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could poten

Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with phy

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator us

Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated a

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potenti

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could poten

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG image

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global an

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access acc

Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read i

Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information.

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access int

Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is

IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system.

Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior t

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted p

An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the cont

A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This fla

Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific p

mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perfo

A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue

A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability af

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contai

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects

A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a nul

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack functi

A vulnerability classified as problematic has been found in ConsoleTVs Noxen. Affected is an unknown function of the fil

Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an improper preservation of permi

A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problemati

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename'

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated u

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer

In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially

A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This af

A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this

A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Aff

A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unkn