2022

A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API

Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-

HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the

A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or exec

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing den

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary

A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI h

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a s

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ab

A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook model

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, Think

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS t

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BI

Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify

An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2)

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) an

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configu

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an att

Link-Admin v0.0.1 was discovered to contain a SQL injection vulnerability via DictRest.ResponseResult().

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.

MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attack

Command Injection vulnerability in [email protected] in GitHub repository yarkeev/git-interface prior to 2.1.2. If bot

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username.

Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Ar

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users t

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browse

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an attacke

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could ha

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb atta

service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Win

In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This

There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is cop

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data

The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially craf

All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user.

An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS T

Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/too

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the func

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the func

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the functi

SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capab