2022

An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Net

An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthe

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos O

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unaut

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locall

An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper I

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the

A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated attacker to cause a D

An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated att

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that

A reflected Cross-site Scripting (XSS) vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authen

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended e

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain s

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /string

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_typ

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /s

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.

There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mys

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer()

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker who has compromised a GoCD agent can upload a ma

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker with privileges to create a new pipeline on a Go

An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default,

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The Geo

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<ifac

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stac

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stac

Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::g

GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of da

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer fr

Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub reposi

An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a c

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a cras

A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through malicious

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary cod

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the

Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 a

An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data an

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capab