2022

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation v

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corru

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default co

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Runtime Remote Code Execution Vulnerability

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), a

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscal

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported ver

NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by una

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a m

Windows User Profile Service Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary m

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.