2022

An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path

An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.

An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in

An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which m

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to res

Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides suffi

Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well

A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and

An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due

A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter leng

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacke

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issu

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote att

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Produc

It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-

It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accesse

A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a

Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper

It was observed that while login into Business-central console, HTTP request discloses sensitive information like userna

A cross-site scripting (XSS) vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to exec

An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attackers to au

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerabili

The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](htt

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could po

Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious use

Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read se

The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git a

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When callin

IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocat

IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information

IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform uninte

IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker than expected cryptographic algorithms that could

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg

pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing.

Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.

An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Sna

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivi

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Sn

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing ti

Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdrago