2022

In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction byp

In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass du

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. Th

In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incor

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race

remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 al

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenam

Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulner

The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of thi

The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidential

In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mallo

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mallo

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by de

WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability,

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no

Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could pot

Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary pag

Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with

Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could e

Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user co

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authentica

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot cr

IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allow

IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system t

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisc

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco F

In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases

Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified T

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated rem

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V1

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V1

A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license serv

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WI

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker

A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could a

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow a remote attacker to conduct a cross-s

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenti