2860 matches found
CVE-2022-3748
Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affects Access Management: from 6.5.0 through 7.2.0...
CVE-2022-3371
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...
CVE-2022-3214
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing...
CVE-2022-30999
FriendsofFlarum FoF Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 is configured to allow the uploading of SVG files 'image/svg+xml', navigating directly to an SVG file URI could execute arbitrary Javascript code decided by an...
CVE-2022-38491
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks. Version 2022.1.133.0 corrects this issue...
PT-2025-5879 · Unknown · Egavilan Media Resumes Management/Job Application Website
Name of the Vulnerable Software and Affected Versions: Egavilan Media Resumes Management and Job Application Website version 1.0 Description: The issue allows remote attackers to inject arbitrary code via the First and Last Name fields in the Apply For This Job Form. This is a Stored Cross Site...
CVE-2022-29169
BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...
CVE-2022-32534
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...
CVE-2022-32536
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...
CVE-2022-1178
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-1176
Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96...
CVE-2022-1106
use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...
CVE-2022-1461
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2024-48394
A Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the driver of the NDD Print solution, which could allow an unprivileged user to exploit this flaw and gain SYSTEM-level access on the device. The vulnerability affects version 5.24.3 and before of the software...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2111
Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2...
CVE-2022-2036
Cross-site Scripting XSS - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1...
CVE-2022-2932
Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...