PYSEC-2022-209

Command Injection in GitHub repository nuitka/nuitka prior to 0.9...

CVE-2022-2014

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2037

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...

CVE-2022-2015

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...

ITarian SaaS platform security vulnerabilities

ITarian is a remote access and IT management solution from ITarian, Inc. that helps organizations connect and communicate with their customers and employees, facilitating remote file access, system monitoring, troubleshooting and operations management across teams. A security vulnerability exists...

CVE-2022-30745

Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...

CVE-2021-37589

Virtua Cobranca before 12R allows SQL Injection on the login page...

Samsung Internet security vulnerabilities

Samsung Internet is a browser for Samsung cell phones. A vulnerability in the autofill algorithm exists in versions prior to Samsung Internet 17.0.1.69, which can be exploited by an attacker to guess a stored credit card number...

PT-2022-19700 · Jamf · Jamf Private Access

Name of the Vulnerable Software and Affected Versions: Jamf Private Access versions prior to 2022-05-16 Description: The issue is related to Incorrect Access Control, allowing an unauthorized user to reach a system in the internal infrastructure. Recommendations: For Jamf Private Access versions...

CVE-2022-24065

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be...

GHSA-XHP9-4947-RQ78 Denial of service in bottle

Bottle before 0.12.20 mishandles errors during early request binding...

CVE-2022-31799

Bottle before 0.12.20 mishandles errors during early request binding...

PYSEC-2022-227

Bottle before 0.12.20 mishandles errors during early request binding...

Barco Control Room security vulnerabilities

Barco Control Room is a visualization and collaboration solution from Barco Belgium. It is used to build control rooms. A security vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14, which stems from a public license file upload mechanism. By...

Max Yi MaxBoard code-related vulnerabilities

Max Yi MaxBoard is a CMS Content Management System or Web framework from Max Yi Korea. It helps to make website creation and site management easier, and can be easily and conveniently used to build the back-end of applications. A code issue vulnerability exists in Max Yi MaxBoard versions prior t...

Gogs security vulnerabilities

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs versions prior to 0.12.8, which...

CVE-2022-1808

Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3...

Chris Brame Trudesk security vulnerabilities

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Chris Brame Trudesk 1.2.3 that stems from the use of incorrect operators in the application...

CVE-2022-1611

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

WordPress Plugin Team Members Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Team Members plugin versions prior to 5.1.1 contain a cross-site scripting vulnerability that stems...