2022

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of pr

In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local esc

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local esc

In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This

IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker

In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entitie

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of

In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnera

A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a

In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters

EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php

Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.

Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.

Bluecms 1.6 has a SQL injection vulnerability at cooike.

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03

There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 1

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft Image

A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A speci

The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the M

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distrib

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capa

The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sur

The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache i

A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.

A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves appli

Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter.

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c

OMPL v1.5.2 contains a memory leak in VFRRT.cpp

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/

In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed

Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52.

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers

A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an un

A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat D

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA)

A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unau

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow

A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an un

A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthent

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA)

A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an au

A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authe

A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat D