2022

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fi

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting

In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions,

In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the dev

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local informatio

In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to imprope

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a miss

In People, there is a possible way to determine whether an app is installed, without query permissions, due to side chan

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of s

In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosur

In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could l

In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a

In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side ch

In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclos

In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side chann

In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to sid

In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side c

In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query per

In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side

In DomainVerificationService, there is a possible way to access app domain verification information due to a missing per

In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permissi

In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent

In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could l

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lea

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffe

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr pri

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the pass

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.

Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV.

Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.

An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight,

Archer 6.x through 6.10 (6.10.0.0) contains a reflected XSS vulnerability. A remote SAML-unauthenticated malicious Arche

Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may po

Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authe

The Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an insecure credential storage v

Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer use

A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to

In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by inte

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious act

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large