2022

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to

A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue af

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic.

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce Syste

A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unk

A vulnerability was found in SourceCodester Interview Management System 1.0. It has been rated as critical. This issue a

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This v

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical.

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by th

A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiAD

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validati

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware ver

An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Port

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scannin

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of it

A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw all

A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the

This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impac

DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code

SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP

Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive info

Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to ge

Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to acces

Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5

Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allow

Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local atta

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an a

Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. Afte

insert HTML / js code inside input how to get to the vulnerable input : Workers &gt; worker nickname &gt; inject in this

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to

Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get

Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to sc

Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and

Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code exe

Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC a

Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connecte

A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the us

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activit

A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content provi

Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers t

A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user

Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connecte