2022

Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of th

Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality

Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic

Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cau

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by an out-of-bounds read vulnerability

Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulner

Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vuln

OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open P

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/inde

Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdow

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department

There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose l

CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any ext

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.

The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could all

The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdr

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Sna

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobi

Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Sna

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, S

Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Comput

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Sn

Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdr

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles with

memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Conn

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indus

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapd

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity,

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Sn

Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote c

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR pri

An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially e

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.