2022

There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of u

EXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a local privilege escalati

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. Aft

In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755,

Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2

Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 7

A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attacke

An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing Sy

An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make imp

The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which cou

The Motors WordPress plugin before 1.4.4 does not properly validate uploaded files for dangerous file types (such as .ph

The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a

The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL stateme

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX ac

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leadin

The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.

Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet .

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wif

Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.

ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.

Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (ev

Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied wi

A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local

An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could all

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loca

A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as

An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One

A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run ar

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Per

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Fla

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit

A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this conditio

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled con

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of