2022

Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows a

Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read

Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently laun

Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEG

Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access se

Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior

Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versio

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom impleme

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpDataTables (WordPress plugin) versions <= 2.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14.7.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions start

A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 p

Incorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting f

An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DO

Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure met

It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accesse

Raidrive before v2021.12.35 allows attackers to arbitrarily move log files by pre-creating a mountpoint and log files be

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead

A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly n

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Pr

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profel

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of s

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typic

A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profil

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Ma

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is th

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affect

A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affect

A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulner

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stress

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects so

A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerabi

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigg

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting fr

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since re

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Af

Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single characte

Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malici

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-

A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO)

A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a rem

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. Th

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed

Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed). The code cou

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 1