2022

The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high priv

The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users wi

The Easy Username Updater WordPress plugin before 1.0.5 does not implement CSRF checks, which could allow attackers to m

The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor direc

The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_option

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an un

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected

A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Aff

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerab

A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an u

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown p

A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this is

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this

A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unkn

A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vuln

A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unk

Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and

Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NA

Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATE

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unk

A vulnerability was found in SourceCodester Interview Management System 1.0. It has been rated as critical. This issue a

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This v

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical.

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by th

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware ver

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Port

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scannin

This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impac

DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code

SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP

Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive info

Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to ge

Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state

Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allow

Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local atta

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an a

Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. Afte

insert HTML / js code inside input how to get to the vulnerable input : Workers &gt; worker nickname &gt; inject in this

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to

Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get

Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to sc

Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and

Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code exe