2022

Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Inte

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx Creation). Support

Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Expenses, Currency Override).

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet). Supported versions

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). Supported vers

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported vers

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could ca

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build

A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of se

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on cert

A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Ser

An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Ne

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unau

A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 swit

A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Jun

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Ne

A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an att

An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an ad

A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS all

An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated

A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an attacker to caus

A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an att

An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerabili

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows o

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with frien

Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA whe

NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where imprope

Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used wheneve

An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible

The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data d

The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plug

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting fro

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of u

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowe

In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive informati

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw wa

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write acce

Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.