2022

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of at

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS

Windows SmartScreen Security Feature Bypass Vulnerability

Unauthenticated remote arbitrary code execution

Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management fram

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS l

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the r

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authen

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from whi

Windows Scripting Languages Remote Code Execution Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting bot

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corru

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 1

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privil

Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromi

Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially explo

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remo

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through ama

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewa

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.

Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One a

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Statio

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, h

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafte

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 bef

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 1

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 1

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fi

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified T

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit