2022

The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause lau

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke t

There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of thi

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to imprope

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential in

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authentic

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attac

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacke

A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu

In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded sh

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress

A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers

A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows a

A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts o

A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or H

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/

FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /

A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web s

ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them

SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauth

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywh

Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to in

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with hi

Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with

SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting

SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attack

An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supp

User login brute force protection functionality bypass

In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen by

In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to imp

In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local e

In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error.

In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a p

In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote

In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due

In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exce

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to loc

In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to loc

In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privil

In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privil

In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege w

In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit