2022

Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a m

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extens

The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 80

Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessibl

A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching ke

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administr

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 buc

Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/t

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mit

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain micr

The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to

IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Af

A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue af

A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some

A vulnerability has been found in Online Hotel Booking System 1.0 and classified as critical. Affected by this vulnerabi

The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via the query string parameter q. I

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions i

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions i

An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages

Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.

Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keygu

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access i

Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the serv

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wif

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to acce

A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to int

Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file.

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferre

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbit

EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting (XSS) vulnerabilit

Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some

Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FIN

Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will aff

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will aff

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendi

A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applic

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses a

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a sta

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a sta

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a sta

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management i

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at