2022

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the adm

There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side.

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWeb

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.

In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due

In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead

In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input va

In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a h

In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This c

In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. Thi

In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This

In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local inform

In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This

In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System exec

In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. Th

In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing p

In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer

In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This co

In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This cou

In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This c

In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to loc

In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could l

In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bound

In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local esca

In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privil

In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This co

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Phil Baker's Age Gate plugin <= 2.17.0 at WordPress.

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to imp

In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phon

In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTF

When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted sources in SAP 3D V

When a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted sources in SAP 3D Visual En

When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untrusted sources in SAP

When a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from untrusted sources in SAP 3D Vi

EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prio

Discourse is an open-source discussion platform. Prior to version 2.8.4 in the `stable` branch and version `2.9.0.beta5`

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool s

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitt

TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11,

TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29,

TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29,

When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterpri

When a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from untrusted sources in SAP 3D Vi