2022

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScri

Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97

It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write o

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileg

Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen,

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated wi

An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL,

CodeIgniter is a PHP full-stack web framework. When an application uses (1) multiple session cookies (e.g., one for user

CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the

AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command executi

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an atta

Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privil

Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5

Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager  2022.3.26 and earlier on

Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and pri

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A miscon

Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a

All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sand

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper

Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.

wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalation

Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sys

The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affec

The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect sy

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect sy

The application management module has a vulnerability in permission verification. Successful exploitation of this vulner

The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may

The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may a

The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerabilit

The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will c

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized

OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Wa

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal s

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability

An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to ex

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to exec

An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows at

An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows a

An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitra

An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MI

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can condu

D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-25

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A cra

D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.