2022

In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local i

In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalati

In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of pri

In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP comma

Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650

Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G

Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earli

Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G

Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C55

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript

HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful expl

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploita

PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this

The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this

There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect serv

Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this v

ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web roo

ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of th

Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to

openwhyd is vulnerable to Improper Authorization

An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticate

The Booking Calendar WordPress plugin before 8.9.2 does not sanitise and escape the booking_type parameter before output

The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestam

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allow

The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, al

The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the searc

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_resul

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter bef

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before o

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section paramete

The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_acti

The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud serv

The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the

The Mortgage Calculator / Loan Calculator WordPress plugin before 1.5.17 does not escape the some of the attributes of i

The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activit

Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial

Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Comp

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (w

admin/limits.php in Dolibarr 7.0.2 allows HTML injection, as demonstrated by the MAIN_MAX_DECIMALS_TOT parameter.

DMP Roadmap before 3.0.4 allows XSS.

The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network c