2022

A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System I

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation,

A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a

Screen Creator Advance2, HMI GC-A2 series, and Real time remote monitoring and control tool Screen Creator Advance2 vers

Cross-site request forgery (CSRF) vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions,

ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . If

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.

Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulne

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php an

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-b

The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate pass

countly-server is the server-side part of Countly, a product analytics solution. Prior to versions 22.03.7 and 21.11.4,

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of speci

The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a

cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a us

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacke

Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level c

Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level command

Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into

Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented Sy

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and R

Remote Code Execution (RCE) in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site R

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10

A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

A remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and belo

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for T

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Editi

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege e

Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.

Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruptio

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a re

IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a

GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can

A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to