2022

If anonymous read enabled, it's possible to read the database file directly without logging in.

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to

A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices be

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapd

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Co

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compu

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snap

Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Au

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Co

Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT,

Denial of service in MODEM due to reachable assertion in Snapdragon Mobile

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networ

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe functio

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the P

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the d

In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function fo

In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated a

The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in

Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through

ReDoS vulnerability in LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 be

A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through 7.4.3.4, and Liferay DXP 7.1 before f

WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter

Konker v2.3.9 was to discovered to contain a Cross-Site Request Forgery (CSRF).

DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM c

DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM cor

DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRA

DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM cor

DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM co

DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corr

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a con

The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessa

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could c

An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers t

A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneou

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information componen

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component u

A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffe

Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that

Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/in

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arb

A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for task

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the conf

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.