2022

Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability tha

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unne

Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.

Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto

Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snap

Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon

Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapd

Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto

Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto

Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdr

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto

Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto

Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapd

Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length pa

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Sn

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapd

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snap

An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snap

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sna

Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sendi

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrago

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memo

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release call

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Co

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto,

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification

In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixa

Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles

The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In

In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can ins

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and re

Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. I

An issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for the GrowthExperiments ext

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occu

An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromis

An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap

Miniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blog/edit. Thi

Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the br

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php

Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/ap