2022

TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /libraria

Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem.

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd.

Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools.

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. T

Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. T

Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. T

Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. T

Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools.

Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools.

Use After Free in GitHub repository vim/vim prior to 9.0.0286.

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring.

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/setting

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to c

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafte

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at

IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attac

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML feat

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a mess

A malicious unauthorized PAM user can access the administration configuration data and change the values.

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. T

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This fl

It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is no

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing atta

A flaw was found in satellite. When giving granular permission related to the organization, other permissions allowing a

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0.

htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php

SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to caus

A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to

An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (buil

Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated mal

Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could poten

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /ad

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/mo

Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to o

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at