2022

Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET mul

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-bas

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafte

An attacker can use the unrestricted LDAP queries to determine configuration entries

It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be

The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3

Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig tem

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server pri

Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Setup pag

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execut

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Ne

An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified d

Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direct

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipart_parser c

Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbitr

A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by t

A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper valid

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does

The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated reflected XSS vulnera

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosur

CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version 5.17.1-754993421 and prior on A

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer

A vulnerability classified as problematic has been found in Ruby on Rails. This affects an unknown part of the file acti

Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. On sites with Patreon login enabl

Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 co

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecur

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/f

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity func

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/fo

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admp

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAto

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the functio

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4_MemoryBy

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the fun

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown funct

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::Write

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_Sts

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided c

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1

Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, 1.42.6, 0.41.9, and 1