2022

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslato

Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslat

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.e

Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslat

SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file

SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated at

Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be rest

Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials en

The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11

SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory mana

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed

Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System)

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immedi

VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges m

Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versi

Cross-Site Request Forgery (CSRF) vulnerability in Shortcodes Ultimate plugin <= 5.12.0 at WordPress leading to plugin p

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android

There is an unauthorized service in the system service. Since the component does not have permission check, resulting in

There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have pe

There is an missing authorization issue in the system service. Since the component does not have permission check , resu

There is an missing authorization issue in the system service. Since the component does not have permission check , resu

There is an missing authorization issue in the system service. Since the component does not have permission check and pe

There is an missing authorization issue in the system service. Since the component does not have permission check , resu

There is an missing authorization issue in the system service. Since the component does not have permission check , resu

In CarSettings of app packages, there is a possible permission bypass due to a confused deputy. This could lead to local

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource e

In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to

In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could le

In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device po

In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a lo

In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could l

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This

In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of

In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. T

In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This

In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to

In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when anothe

In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows upload

In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead

In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local e

The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more out

A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which

Visual Studio Code Elevation of Privilege Vulnerability