2022

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra().

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and

Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerabi

SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable gui

In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 75

In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could l

In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This coul

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emerg

In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to l

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versio

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop.

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for Open

The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modifie

Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`,

Discourse is an open source discussion platform. Discourse groups can be configured with varying visibility levels for t

IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could b

vim is vulnerable to Heap-based Buffer Overflow

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitat

Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticat

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special chara

A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerabili

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulner