2022

@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a spe

Remote desktop takeover via phishing

In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check.

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused

In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission ch

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a

In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validati

In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the

In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a miss

In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. T

In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of

sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and n

CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.

Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availabili

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo)

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operat

A vulnerability has been identified in QMS Automotive (All versions < V12.39), QMS Automotive (All versions < V12.39). U

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versio

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.

A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions <

The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions p

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function r

Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youtha

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Por

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the co

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php

An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learnin

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit paramete

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party

When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it