2022

A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is s

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login crede

A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is

A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a speciall

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attack

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitra

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerabil

This affects the package fastify-multipart before 5.3.1. By providing a name=constructor property it is still possible t

Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which ma

Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadat

Hessian serialization is a network protocol that supports object-based transmission. Apache Cayenne's optional Remote Ob

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon A

Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapd

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message i

Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdrago

Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer

Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/

Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdrag

Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in

Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon

Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT,

OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tag

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Me

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink() function.

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-m

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.

Optimism before @eth-optimism/[email protected] allows economic griefing because a balance is duplicated upon contract self-

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradl

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalP

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo

A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let

A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or O

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a speciall

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service

A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the ser

A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a spe

A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a s

A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends

A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of serv

Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions,

A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to th

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modific

SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53,

SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, all