2022

When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SA

When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources in SAP 3D Visual Enter

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and

When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visua

A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system.

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction

Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30,

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database -

Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable

Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated r

The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error th

An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 w

ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.

Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF).

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88,

Employee Leaves Management System (ELMS) V 2.1 is vulnerable to Cross Site Request Forgery (CSRF) via /myprofile.php.

The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication

In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=bat

Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Mo

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application cont

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for install

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application cont

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application cons

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application cons

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST reques

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validat

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perf

A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Works

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application disclo

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up windo

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is m

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is m

In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.

In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account wit

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx dr

Improper handling between export and release functions on the same handle from client can lead to use after free in Snap

Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snap

An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Com

Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification

Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snap

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Co

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon In

Improper validation of permissions for third party application accessing Telephony service API can lead to information d

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosu