2022

In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private director

In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This c

In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user d

In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due t

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race conditi

In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag c

A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts c

In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset

Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Li

A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive infor

Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might

In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x b

Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to cras

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.

A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier al

A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earl

The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for n

Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project i

Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >

Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >

CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal

A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decomp

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decomp

Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.

GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c.

fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git re

The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_rep

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do no

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which co

GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen

The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX

The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the pos

Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-s

The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJA

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.

Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This i

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by

Mirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate privileges. NOTE: this