2022

DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would que

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still use

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does no

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.

Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code

Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Use

lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer belo

prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected v

TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function

NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker

Pimcore is an Open Source Data & Experience Management Platform. Pimcore offers developers listing classes to make query

Guzzle, an extensible PHP HTTP client. `Authorization` and `Cookie` headers on requests are sensitive information. In af

Guzzle, an extensible PHP HTTP client. `Authorization` headers on requests are sensitive information. In affected versio

ScratchTools is a web extension designed to make interacting with the Scratch programming language community (Scratching

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected vers

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key excha

A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue af

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to t

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored usin

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Sup

The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable va

In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array<AP4_TrunAtom::Entry>::EnsureCapaci

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject ar

When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will caus

When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter b

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it wil

When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it wil

When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three,

When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater tha

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operator

When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating c

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5 when validating crafted in

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git-downloader v0.1.1 when downloadi

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1.2.0 when copying craft

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to-chars v1.0.5 when splitting

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3 when validating crafted

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted i

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the fil

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing non

The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to a