2022

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalatio

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of priv

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privi

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local informati

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to loc

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to loc

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expand

Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, T

The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacke

IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP

In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with

IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramD

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user'

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwor

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruc

Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.

Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).

Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivi

quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in

An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to othe

An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to o

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including X

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Admi

JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote a

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_v

An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a cra

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This r