2022

Improper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows a local attacker to con

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory.

A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bin

Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access Seri

Use after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to SMR Oct-2022 Release 1 al

Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of t

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affe

In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP pack

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called

The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and

The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.

discourse-chat is a plugin for the Discourse message board which adds chat functionality. In versions prior to 0.9 some

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing

** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context i

** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context i

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML

dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vul

Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorizati

DiscoTOC is a Discourse theme component that generates a table of contents for topics. Users that can create topics in T

syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sy

IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vuln

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulatio

A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perf

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting s

Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authent

The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and p

The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and

The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and p

IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By pers

pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component. This v

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server

Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed function in mp4mux.

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_AtomFactory::CreateAtomFromStream function in mp4s

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function in mp42hls.

Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component.

nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component

Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function in the mp4encrypt bina

The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high pr