2022

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensit

Access of Memory Location After End of Buffer (CWE-788)

Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.

Access of Memory Location After End of Buffer (CWE-788

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Googl

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows a

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Promotion

Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting

Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCo

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress.

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a den

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the adm

There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side.

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injec

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not ne

In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWeb

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.

In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the mode

In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overfl

In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value.

In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead

In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input va

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug r

In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a h

In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This c

In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. Thi

In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This

In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions byp

In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local inform

In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This

In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of pri

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to

In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedde

Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validat

In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System exec

Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. Th

In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing p

Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer

Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A