2022

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject a

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (this is information t

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authentic

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authentic

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authentic

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by t

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the

fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM). In versions prior to 0.

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function

ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are su

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process on

In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of pri

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privileg

In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit

A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts

A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba Instant

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba Instant

An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers

A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote att

Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.

IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should onl

IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 22

IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force I

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S

Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to

Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized

Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthori

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add boo

Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected B

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows atta

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows atta

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows atta

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows atta

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attacke

Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attac

Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S

Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video wi

Improper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to access sensitive infor

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive

Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers t