2022

DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM c

DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM cor

DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRA

DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM cor

DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM co

DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMR

DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corr

DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM c

Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used

DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 inadvertently disclose server-side sensitive

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 did not use strict comparison for the legacy_

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leadi

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 does not issue a new session ID upon successf

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a con

Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access at

The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessa

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could c

DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on th

DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver coul

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboa

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the multili

In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2, the authTypeConcreteCookieMap table can b

Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the Client

DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU a

DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have be

XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.

An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers t

Discourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar

An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs w

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.

A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneou

Discourse is the an open source discussion platform. In some rare cases users redeeming an invitation can be added as a

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.

patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a loc

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing tha

A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module.

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information componen

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component u

IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the image m

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS - user can cau

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used b

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c

IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force