2022

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which

The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call de

A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 befor

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggre

org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expressio

Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails v

HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In Priva

GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the f

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the

Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute cal

Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications

Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file withou

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allow

Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access priv

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute a

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPres

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.

DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code.

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code.

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that i

Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbit

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to acce

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with s

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Androi

Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr

Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write.

Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows a

Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow.

Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of s

Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read

Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain acti

Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch

Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certai

Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch ce

Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch cer

Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 all

Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Relea

Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID

Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of servic

An attacker can perform a privilege escalation through the SICK OEE if the application is installed in a directory where

The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence n

Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently laun

Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched