2022

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 co

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allow

Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execu

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigg

Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigge

An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system di

Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untruste

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access int

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activ

Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attacker

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access me

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(1

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-20

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release al

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Relea

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Relea

The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permission

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(1

Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Andro

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memo

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attacker

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to acces

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS sign

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrar

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff ve

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (

An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vuln

A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.

In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with n

In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow.

In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Produc

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improp

In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead t

In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead t

In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of

In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This

In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circum

In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead

In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could le