2022

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_rele

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remo

A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers t

Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.

Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, whi

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.

An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and belo

An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to al

MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/

An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to caus

An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to

An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow

An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), w

MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was f

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network a

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LO

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_sv

Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect. An unprivilege

Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated n

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the c

Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged netwo

Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could

Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash

By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does n

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - v

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the sa

Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a c

The affected product is vulnerable to an out-of-bounds read, which may result in code execution

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arr

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary co

The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing th

A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of pr

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. T

In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground

In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a

In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass.

In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escala

In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation.

In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. Th