2022

This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows rem

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availabili

There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulne

There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service

There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause

In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possibl

In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the ed

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent r

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.

HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP reques

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker co

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki u

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them

The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporari

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP

Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupl

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization o

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passe

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing a

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled w

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN t

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in

A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf.cxx may lead to execute a

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticat

A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of import

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-b

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or auth

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a

The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload fil

A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker t

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker t

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-b

HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/fi

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code vi

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the i