2022

With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's con

HCL Launch may store certain data for recurring activities in a plain text format.

HCL Launch stores user credentials in plain clear text which can be read by a local user.

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified C

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP

Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to c

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Comm

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could all

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Manag

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset pac

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execut

EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input.

A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verific

OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the render

Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were foun

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of mo

NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromis

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in R

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in R

openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key

Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between E

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.

Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSett

Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Wi

Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP ad

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data cor

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security

A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitr

this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs t

An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would

In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of priv

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati