2022

An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. iota All

An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc.

An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc. iota All-In-One Secur

An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, In

An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc. iota All-In-One

An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, In

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Man

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) b

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnti

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.G

Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain

Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) all

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attac

Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 a

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to injec

In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode

Kirby is a flat-file CMS. In versions prior to 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, Kirby is subject to user enumeratio

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior t

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stac

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can

Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a

Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the

myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attac

Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. Th

A broken access control vulnerability in the SubNet_handler_func function of spx_restservice allows an attacker to arbit

An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Deni

A broken access control vulnerability in the KillDupUsr_func function of spx_restservice allows an attacker to arbitrari

Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Ple

A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to a

A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitr

Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_rest

A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allow

Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_re

Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice all

Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a De

jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prio

IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer o

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_ino

** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is t

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function ni

Dell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or Throttling vulnerabili

Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malici

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log

Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated attacker could

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and