2022

An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby `YAML

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensit

PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security

PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker c

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to

Jenkins Recipe Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

A cross-site request forgery (CSRF) vulnerability in Jenkins Recipe Plugin 1.2 and earlier allows attackers to send an H

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected vers

IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operat

IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable t

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upl

A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the co

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulne

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Code Injection in GitHub repository getgrav/grav prior to 1.7.34.

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perf

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file.

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file.

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes wi

CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wr

CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.

A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the

Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A remote unprivileged mali

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of `underscore.deep` prior

A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP.

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files

An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thou

Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which ma

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CE

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01

DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recor