2022

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go i

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this f

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inf

A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By ex

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is cre

A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a den

A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access so

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a u

A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in V

A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication

A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a te

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This f

MaxQueryDuration not honoured in Samba AD DC LDAP

An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control

An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the t

A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permi

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be pr

A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed

A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direc

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a maliciou

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server w

An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system informat

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without auth

A vulnerability classified as problematic has been found in ConsoleTVs Noxen. Affected is an unknown function of the fil

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4.

Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbi

Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administ

Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an a

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of rece

The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) du

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missin

All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing handler for failed c

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA

All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing limitation on the nu

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA100

Fiserv Prologue through 2020-12-16 does not properly protect the database password. If an attacker were to gain access t

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authentic

OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive inf

TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnera

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multipl

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymo

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to caus