2022

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 an

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadO

One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the syste

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, wh

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project

Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the share

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString valu

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtq

Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read vulnerability that cou

Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read vulnerability that cou

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could a

An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but

Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access pa

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access pa

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access pas

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access pas

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access passwo

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access u

Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read.

Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILT

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission se

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected v

Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can caus

An authenticated user can create a link with reflected Javascript code inside it for graphs’ page and send it to other u

An authenticated user can create a link with reflected Javascript code inside it for items’ page and send it to other us

An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other

Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability

Media Foundation Information Disclosure Vulnerability

Nextcloud talk is a self hosting messaging service. In versions prior to 12.3.0 the Nextcloud Android Talk application d

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM

JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all

An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager ve

Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirec

A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and b

Sensitive information disclosure discovered in wpDiscuz WordPress plugin (versions <= 7.3.11).

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, whi

The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in

Cosign provides container signing, verification, and storage in an OCI registry for the sigstore project. Prior to versi

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroS

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroS

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroS

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroS

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroS

snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions.

IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494.

The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high

The Ibtana WordPress plugin before 1.1.4.9 does not have authorisation and CSRF checks in the ive_save_general_settings

An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system di

Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot