2022

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app

In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This cou

In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary bro

In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function.

NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encodin

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modifie

Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`,

Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cau

Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastro

Discourse is an open source discussion platform. Discourse groups can be configured with varying visibility levels for t

IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could b

October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versi

October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versi

vim is vulnerable to Heap-based Buffer Overflow

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /ap

A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitat

Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticat

kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availabil

The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 cop

The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34

A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4

The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which a

The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inje

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special chara

A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated,

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) a

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,

eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename.

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If