2022

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. Th

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects t

A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.as

A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown p

A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the c

A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New W

A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown f

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the c

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privile

MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with versi

LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.

Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0be

Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited

Virtua Cobranca before 12R allows SQL Injection on the login page.

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.p

LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.

A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application da

A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack

SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject

SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files m

The "Add category" functionality inside the "Global Keywords" menu in "SeedDMS" version 6.0.18 and 5.1.25, is prone to s

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.

In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman&section=get&page

Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequ

Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Us

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure.

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availabilit

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently en

Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /..

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ

LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution.

Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certa

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to rou

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could fo

In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of servic

In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of servic

In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of servic

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege wit

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of ser

In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform

In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati