2022

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Proje

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branc

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A spe

A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firef

If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while refere

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs s

Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firef

ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed

Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affec

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported m

Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs presen

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially ex

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerabi

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bug

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have

If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scri

If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the

The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iO

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability aff

Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, a

An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulne

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.

Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session comp

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allo

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not saniti

This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request

The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the We

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys

Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause syst

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys

Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause syst

The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memor

Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability

A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteF

pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Fou

pdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilter(char*, Stream*,

pdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copy(Object*):Object.cc.

Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obta