2022

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulne

The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulne

The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affe

The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result

The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result

There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones.

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command w

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validatio

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow a

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to cras

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive m

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that woul

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to ca

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to

Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker w

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511)

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-pri

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a

vim is vulnerable to Out-of-bounds Read

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attac

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious ph

Apache Kylin provides encryption classes PasswordPlaceholderConfigurer to help users encrypt their passwords. In the enc

In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. This issue affects Apach

If an OpenID Connect provider supports the "none" algorithm (i.e., tokens with no signature), pac4j v5.3.0 (and prior) d

All request mappings in `StreamingCoordinatorController.java` handling `/kylin/api/streaming_coordinator/*` REST API end

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC de

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter.

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hoppscotch hoppsco

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execu

An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 be

An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 befor

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 befo

An issue was discovered in SdLegacySmm in Insyde InsydeH2O with kernel 5.1 before 05.15.11, 5.2 before 05.25.11, 5.3 bef

containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or S

IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could le

In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has u

In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Djan

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityVal

Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and