2022

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sna

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdr

Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto,

Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, S

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of servic

Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn

Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when block

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile

Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an

A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by

When running in prototype mode, the h2 webconsole module (accessible from the Prototype menu) is automatically made avai

Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /

OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending t

A Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload functionality in Liferay Digit

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystroke

An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the add

EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Cent

Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php.

A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and L

A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7

Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 throu

A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through

A Cross-site scripting (XSS) vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and L

A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Securi

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c.

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is aff

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automa

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automa

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported ver

Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft (component: Approval Framework

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The s

Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General). Supported versions that ar

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are af