2022

Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID

Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of servic

Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to

Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to

Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allow

Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allow

Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Rel

Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allow

Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allow

Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allow

Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allow

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can

Improper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows that attackers can acces

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locke

Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows c

Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows a

Discourse is an open source platform for community discussion. In stable versions prior to 2.8.3 and beta versions prior

An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic conn

In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote

In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privile

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local info

In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information d

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi

In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to loca

In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalat

In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. Th

In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local es

In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalat

In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to loca

In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to lo

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local informati

In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 al

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logg

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to re

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress p

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Premio Chaty (WordPress plu

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attacke

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows us

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page