2022

Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution.

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut witho

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to p

PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attacke

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to

Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenizat

"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under certain configurations t

Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove)

Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical acce

Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsi

A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data pr

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physi

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Releas

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without

Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.

Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.

Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce

The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input na

Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticate

SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs,

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows a

An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL

Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can rea

A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arb

Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pfS

In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of p

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could le

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an atta

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. Fo

libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Ser

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid request

Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_nex

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special co

The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that al

An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPack