2022

There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause

Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to k

There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulne

There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause maliciou

There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerabi

There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerabi

There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injec

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause maliciou

There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause maliciou

There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service

There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of

There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daem

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.

In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possibl

In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project

JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page.

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions.

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the ed

In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.

JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.

In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permission

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to t

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent r

In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server.

In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.

In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.

In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.

In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1,

HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP reques

An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.

The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege esc

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metada

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker co

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki u

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0.

It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argume

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, t

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, t