2022

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allow

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause o

An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to

A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes we

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automa

An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing '_JEXEC or die check' caused

Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX

Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when us

Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's han

An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string lar

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/File

PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.

Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().

LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-che

LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

HCL VersionVault Express exposes administrator credentials.

Use After Free in GitHub repository vim/vim prior to 9.0.0322.

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacki

Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows authenticated attacker

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admi

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admi

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /libraria

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /libr

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /libr

Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /l

Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to

Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authentic

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenti

Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticate

XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.

Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries. A remote au

Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authentic

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Per

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could po

SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker

IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open red

An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below com

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the f

Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asteris

telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference v

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user p

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source cod