2022

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log

Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and

Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows auth

Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vu

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an use-after-free vulnerability

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerabi

In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000

Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 fi

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by una

During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix]

Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jen

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directo

vim is vulnerable to Heap-based Buffer Overflow

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthor

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This i

Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user sessi

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker w