2022

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a di

ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, The

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb

Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.

Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the

Adobe Character Animator versions 4.4.2 (and earlier) and 22.3 (and earlier) are affected by an out-of-bounds write vuln

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootlo

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a

A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, res

An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulti

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapp

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ

An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V

An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302

An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4

An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V

A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A sp

Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potenti

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A special

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated

An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.1035

Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user t

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to po

Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an autho

Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user

Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user

Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable a

Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pote

Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileg

Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e

Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable

Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abu

Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerab

An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus la

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior