2022

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7

A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Mont

A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiali

A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that c

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that cou

A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss o

This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxed

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a

The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker t

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their us

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS a

Microsoft Endpoint Configuration Manager Spoofing Vulnerability

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfi

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in Syste

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in Syste

A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mo

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attac

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to ga

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.

Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially en

In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpag

A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability all

The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and und

The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass. A client can issue an HTTP Accept heade

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submit

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTT

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component C_Featu

A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administra

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWha

A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Whe

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for t