2022

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to c

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset pac

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execut

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of mo

NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromis

openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Wi

Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP ad

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security

In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalatio

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, T

In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with

IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramD

quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote a

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were fou

Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category.

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on l

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lx

Old session tokens can be used to authenticate to the application and send authenticated requests.

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buff

Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vu

NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause acc

The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip

Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attack

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earl

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.2

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHC

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.4

Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Com

Use After Free in GitHub repository vim/vim prior to 9.0.

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.