2022

DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui

mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, eve

Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to sen

Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static asset

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged i

Sourcegraph is an opensource code search and navigation engine. In Sourcegraph versions before 3.41.0, it is possible fo

Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to

Shopware is an open source e-commerce software. In versions from 5.7.0 a persistent cross site scripting (XSS) vulnerabi

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versi

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to

IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X

IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. Thi

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to vi

IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and r

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack.

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.

Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privil

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privil

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privil

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of pr

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of priv

In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of p

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS

The YaySMTP WordPress plugin before 2.2.1 does not have capability check in an AJAX action, allowing any logged in users

The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privileg

The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, wh

The WordPress Popup WordPress plugin through 1.9.3.8 does not sanitise and escape some of its settings, which could allo

The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not validate, sanitise and escape some of its sett

The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exp

The Featured Image from URL (FIFU) WordPress plugin before 4.0.1 does not have CSRF check in place when updating its set