2022

The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked int

The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function,

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox E

All versions of package git are vulnerable to Remote Code Execution (RCE) due to missing sanitization in the Git.git met

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_com

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php.

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could ac

The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into th

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype

stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE

A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allo

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulne

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HT

A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/send

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitizati

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplie

SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and ses

Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially

Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially

Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially

Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability whe

Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability whe

Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability whe

Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a speciall

Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a speciall

Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a speciall

Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing

Adobe Character Animator version 4.4 (and earlier) is affected by an Access of Memory Location After End of Buffer vulne

Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing

Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a special

Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a special

Adobe Audition version 14.4 (and earlier) is affected by an Access of Memory Location After End of Buffer vulnerability

Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a special

In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition.

In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write

In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. T

In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation.

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an

In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information

In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. T

In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a miss

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an

In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of

In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This c

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an

In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This c

In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure.