2022

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below

There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote

There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote atta

An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allo

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in t

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in t

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS) vulnerability in the test para

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup param

Windows Print Spooler Information Disclosure Vulnerability

Windows Clustered Shared Volume Information Disclosure Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows Clustered Shared Volume Information Disclosure Vulnerability

Windows Clustered Shared Volume Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Denial of Service Vulnerability

Windows Clustered Shared Volume Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Print Spooler Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

Windows Failover Cluster Information Disclosure Vulnerability

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote att

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows Server Service Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This co

In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This

In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. Thi

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting f

Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting f

This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an

A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote atta

In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information wit

In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change priv

In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to mi

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This c

In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check.

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This co

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidate

The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to