2022

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vul

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attac

In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obt

Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find i

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affect

With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ fi

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There i

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. Thi

A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some

A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability

A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3,

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow t

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and includi

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security

CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three op

In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must fi

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Auth

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticat

An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Clie

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno

BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute ar

An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make

In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to m

In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in

A stored cross-site scripting (XSS) vulnerability in Mealie v0.5.5 allows attackers to execute arbitrary web scripts or

BookWyrm is a social network for tracking reading. Versions prior to 0.4.5 were found to lack rate limiting on authentic

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains an easily exploi

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter lengt

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread s

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for

The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for p

A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.

A stored cross-site scripting (XSS) vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web scripts

This affects all versions of package Flask-Security. When using the get_post_logout_redirect and get_post_login_redirect

Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custo

Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized paymen

OpenZeppelin Contracts is a library for secure smart contract development. Contracts using the cross chain utilities for

OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsIn

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui

PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames v