2022

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of s

In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of s

In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of

An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all

An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell co

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the w

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vu

An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a

An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vuln

An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of

An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to

When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all ver

A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 be

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 be

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions start

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to

FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Pan

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.

FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin

FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sectio

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occu

In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file)

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirec

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the param

An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and be

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.

Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a, 11.11.5, a

Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorizati

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization th

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and p

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without author

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib conf

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file gl

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file g

Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.