2022

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapd

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Sn

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapd

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snap

An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snap

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sna

Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memo

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Co

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification

Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles

In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can ins

An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromis

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capab

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c d

libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially a

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_

Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_

An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily

InnoSilicon T3T+ t2t+_soc_20190911_151433.swu was discovered to contain a remote code execution (RCE) vulnerability in t

InnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE) vulnerability in the setPlat

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrec

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whil

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests.

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due

A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized i

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when proc

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sendin

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate wou

An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet functio

In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege admi

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /cate

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sche

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sche

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download AP

D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in

D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.

In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC.

ZITADEL combines the ease of Auth0 and the versatility of Keycloak.**Actions**, introduced in ZITADEL **1.42.0** on the

D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.

Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow

Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.

Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. These controls may allow two stack-based