2022

In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalati

In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of pri

In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of

An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attack

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the au

In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of

In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote inf

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoU

A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS command

nltk is vulnerable to Inefficient Regular Expression Complexity

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when re

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.

Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 a

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path travers

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP comma

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Deni

Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This

Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw when

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650

Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G

Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earli

Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G

Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C55

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript

HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.

The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may

The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploi

The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may c

The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cau

The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerabi

Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial

The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cau

Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerabilit

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful expl

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploita

HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system inte

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy

The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may c

Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of s

There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confident

There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to

MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of t

Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this v

HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affe

Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand

There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in