2022

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability ma

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system fil

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services

The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause

The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may a

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vuln

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause thi

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display

The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Succ

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate

DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add A

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks pote

Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading

The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affec

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker w

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC

Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their p

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their priv

Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially expl

Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to ins

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a use

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit

Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap co

An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0.

A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter30

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.

In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of th

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_ac

Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet co

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet co

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap u

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing s

An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x bef

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be perf

Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr

Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit he

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially e

Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corr

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi

Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D

In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated atta