2022

The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result

There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones.

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this

There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may c

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command w

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validatio

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow a

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows user

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to cras

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive m

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthor

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that woul

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user t

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to ca

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker

Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 vers

Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 ve

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resourc

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to

Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker w

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511)

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN

A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This i

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a mu

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-pri

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (conte

A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service.

Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts.

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service.

A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service.

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial

bookstack is vulnerable to Improper Access Control

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a

Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multi

Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multi

vim is vulnerable to Out-of-bounds Read

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attac