2022

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of priv

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of priv

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privi

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local informati

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to loc

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to loc

The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacke

IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user'

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwor

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruc

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivi

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Admi

JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one

A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allow

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0

Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command

Reflected Cross Site Scripting (XSS) vulnerabilities in AST Agent Time Sheet interface (/vicidial/AST_agent_time_sheet.p

SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download paramet

SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the

SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recor

IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track

A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety o

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a precondit

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker t

The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a l

The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the resp

The WP Contact Slider WordPress plugin before 2.4.7 does not sanitize and escape the Text to Display settings of sliders

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it i

The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitize and escape some imported data, allowing hi

The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitise and escape field labels, allowing high pri