2022

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi

In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to loca

In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalat

In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. Th

In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local es

In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalat

In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to loca

In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to lo

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local informati

In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

Incorrect Permission Assignment for Critical Resource in GitHub repository zerotier/zerotierone prior to 1.8.8. Local Pr

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interf

Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 al

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, a

Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO

AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-pri

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logg

The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was

The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful e

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploita

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to re

The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affec

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.0

Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20.

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress p

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versio

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Premio Chaty (WordPress plu

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attacke

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom impleme

A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 (Ax46), V5.0.9 build 15110

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows us

IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remo

IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remo

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocu

An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit

Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection.

In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for fi

Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend a

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data,

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege use