2022

Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The install

An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web appli

GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroa

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially expl

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and includi

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for wh

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerab

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow v

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow v

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow v

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation o

V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.

Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling o

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using Use

atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodl

An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer hos

In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user i

The package simple-git before 3.3.0 are vulnerable to Command Injection via argument injection. When calling the .fetch(

NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unpr

Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3.

The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets.

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs:

'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL

CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource con

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe

Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested o

FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.

FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass aut