2022

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the RO

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypa

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot

A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive info

A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticat

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that e

An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the

PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are block

Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.ph

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote un

Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.

Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sens

In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communic

A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communic

Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header wh

Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organi

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Busi

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for ht

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Ro

When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterpr

When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Vi

When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visu

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads t

Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may exp

Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to

Uncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to

Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user

Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenti

Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to pot

Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to

In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service wit

In Bluetooth, there is a possible information disclosure due to incorrect error handling. This could lead to local infor

In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of

In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalati

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local inf

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local inf

In vcu driver, there is a possible information disclosure due to a use after free. This could lead to local escalation o

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could l

In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

In vow driver, there is a possible memory corruption due to a race condition. This could lead to local information discl

In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local es

In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local inf