2022

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigg

Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigge

Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untruste

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access int

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activ

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(1

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-20

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release al

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Relea

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permission

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(1

Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Andro

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memo

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to acces

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff ve

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff

An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vuln

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.

In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with n

In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow.

In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This

In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could le

In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This cou

In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wron

In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages

tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.

tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information i

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclo

The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under som

The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the f

Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting

Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: D

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bound

An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this v

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manip

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Au

Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to re

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/h

MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php.

Taocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Management Column component.

When a password reset or password change flow with an authentication policy is configured and the adapter in the reset o

A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when ed