2022

An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Sna

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivi

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Sn

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing ti

Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdrago

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vuln

FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch pro

BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability which allows attackers

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd di

Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password functi

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 (fixed version is 14.0.0) via a POST request to the cou

Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload t

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmwa

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and exe

Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pf

Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and exe

Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and

Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cl

totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism

Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is

In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An atta

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component pr

MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new J

MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP servic

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior cont

A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate hi

A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and co

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on

heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerabilit

phpshe V1.8 is affected by a denial of service (DoS) attack in the registry's verification code, which can paralyze the

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UN

An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a C

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar pack

The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitati