2022

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or cra

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices

Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devic

An authenticated user can embed malicious content with XSS into the admin group policy page.

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to chan

ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS).

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under s

A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown funct

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is a

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affec

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Throu

PrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem ac

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In af

tinymce is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in the alert and c

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contai

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allo

In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a pa

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.

In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.

In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B201711

Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user

A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore r

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer o

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerabili

The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers wo

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to And

Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attack

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to A

Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows atta

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attac

Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows l

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access

Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS i

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive inform

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network

Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to

Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some i

Exposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows attackers to access the

Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive informati

Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access cont

Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows

A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknow

A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknow