2022

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Ent

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Softwa

Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.

Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. Th

The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) contains an Authorization Bypass Vulnerability. A remote auth

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11

A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15

A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monter

A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS M

This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catalin

This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macO

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicio

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent Te

This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent Te

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPa

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Mon

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Mon

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, ma

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location i

An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6

An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in t

DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter.

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, ma

Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A ma

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadO

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey

In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Inject

A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if a

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like re

Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privilege

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when usin

A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write o

An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the

Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vul

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated

A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to acce