2022

Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearn

mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user wi

A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUS

UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with gene

UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerab

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SU

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute a

Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obsi

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths

An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.

An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4,

Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to

Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15

An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, an

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions start

Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15

Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a

An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4,

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in James Lao's Simple Video Embedder plugin <= 2.2

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.

Microsoft SharePoint Server Spoofing Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Word Information Disclosure Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

Microsoft Dynamics Business Central Information Disclosure Vulnerability

.NET Framework Information Disclosure Vulnerability

Microsoft Word Information Disclosure Vulnerability

Windows Human Interface Device Information Disclosure Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows att

Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows

Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local

Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1

Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to

Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to c

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows r

Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant pe

Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branc

Windows Hyper-V Denial of Service Vulnerability

There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect dat