2022

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an ou

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an ou

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an ou

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an ou

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (A

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIM

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIM

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 1

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 M

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < 2.15.1), RUGGEDCOM ROX MX5000RE (All version

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions

A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not p

Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, con

mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized atta

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_r

The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_fi

The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file f

Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated atta

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning p

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.

IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elev

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic

Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection att

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exp

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appli

In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffer

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a

Inout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests parameter at /index.php?page=

An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the conn

Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a ma

It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java appl

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain ful

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inh

Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.

With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's con