2022

Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to impro

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and

Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by cap

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approxim

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from th

BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a

A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidenti

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket an

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised s

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsi

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsi

Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overflow vulnerability due

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerabi

Adobe After Effects versions 22.1.1 (and earlier) and 18.4.3 (and earlier) are affected by an out-of-bounds write vulner

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds write vulnerab

VMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance

The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameteriza

A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges.

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileg

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o

This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, befor

ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to E

VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handl

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A

A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients h

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to e

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/set

In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).

In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).

A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthe

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent program

Splashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permiss

Splashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permiss

The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitabl

A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect

A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to co

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) atta

A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission

A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to ha