2022

In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not valida

In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it

Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did

Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using t

Access of Memory Location After End of Buffer (CWE-788)

Access of Memory Location After End of Buffer (CWE-788

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not ne

In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to

In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overfl

In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value.

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug r

In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions byp

In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of pri

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to

In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedde

Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validat

Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This c

In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due

Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A

In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. Thi

In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content provi

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parce

In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escal

In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app t

In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead t

In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi setti

In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escala

In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due

In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permis

In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This

In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interacti

In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications

In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check

In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This

ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_conve

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch se

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=.

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=.