2022

Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable es

Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potenti

Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially en

Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Kil

Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_0

OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity

Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An aut

Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top

Microsoft Outlook for Mac Security Feature Bypass Vulnerability

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

Microsoft Dynamics GP Spoofing Vulnerability

Microsoft OneDrive for Android Security Feature Bypass Vulnerability

Microsoft Power BI Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Common Log File System Driver Denial of Service Vulnerability

Windows User Account Profile Picture Denial of Service Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an

A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable acces

In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploa

XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading th

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.

Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.

A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D"

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompr

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area c

Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), a

ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneousl

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document.

Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wi

Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API en

Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site reque

Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML c

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.