2022

All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users,

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter bef

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter l

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdrag

Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneo

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, S

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdr

Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Au

Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdr

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapd

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto,

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snap

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdrag

Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in

Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdra

Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencin

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon

Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Sn

Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, S

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute,

In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file de

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can le

An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the dr

CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem thro

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicaliza

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.