2022

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnera

Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process commun

SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Sched

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to in

An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL function

Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would othe

Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an

Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an

In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local esc

In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linu

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could

Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connectio

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp f

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability

There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitati

There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Succes

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerabilit

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerabilit

There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of t

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitati

There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may

There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulne

There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will a

There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to

There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vuln

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploita

A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, whe

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Plat

An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS oper

A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspectio

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.

Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enable

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows whe

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communica

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not v

Windows Update Stack Elevation of Privilege Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability