2022

Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arb

Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninst

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access locati

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows atta

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local in

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local in

In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information

In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information di

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of pr

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local esc

In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entitie

A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a

In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters

A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A speci

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the M

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capa

The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache i

A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or

Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter.

A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an un

A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an au

A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authe

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow a

A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for i

Links may not be rewritten according to policy in some specially formatted emails.

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified ho

XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially craft

A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web

A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers

When a password reset mechanism is configured to use the Authentication API with an Authentication Policy, email One-Tim

Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPr

Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Ad

Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2