2022

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to acces

Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activit

Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers t

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chro

An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitial

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starti

An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions startin

An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 1

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starti

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions of Nextcloud mail wou

Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions whi

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is a

A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by thi

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutr

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discu

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulner

Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, We

Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of pr

Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could all

The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerabil

A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected

In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was misse

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross

In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross

Authenticated Stored Cross-Site Scripting (XSS) vulnerability in Florent Maillefaud's WP Maintenance plugin <= 6.0.7 at

Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows atta

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plu

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: General/Core Client). Supported versions tha

Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected ve

IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extensio