2022

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadO

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.5, macOS Big Su

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8,

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8,

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6

Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a u

An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can c

72crm 9.0 has an Arbitrary file upload vulnerability.

An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user als

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_a

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session d

An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating sy

A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panic

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a nul

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the ser

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing

An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. D

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory lo

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files wit

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery o

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interfac

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out

A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local user

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when th

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to inf

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be fre

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be fre

The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLSer

The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer v

An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Pro

In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This co

In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could

An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.logi

Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ss

de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC.

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific for