2022

Windows ALPC Elevation of Privilege Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows PlayToManager Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead

In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This co

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Un

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirectio

In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground s

In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode

In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app th

In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's u

In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and

In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input valida

The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode

The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/c

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object reference

A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 1

Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrar

In Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection. Attackers can bypass access to sensit

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potent

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partiall

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availabili

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.

The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TI

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow

Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are ca

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capa

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repo

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arr

A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mis

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena J

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena O

Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the a

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occu

IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could a