2022

PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 1

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 1

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPa

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadO

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8,

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8,

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6

Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey

An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_a

A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the ser

An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interfac

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when th

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to inf

The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLSer

The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer v

An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Pro

Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ss

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific for

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, wh

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excess

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with loc

A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by de

A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file

A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution wh

Use After Free in GitHub repository vim/vim prior to 9.0.0246.

Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.

Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 a

Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at

Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress.

Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin <= 1.9.10

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this f

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inf

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This f

An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control

An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the t

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be pr

A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed

An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system informat

Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administ

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of rece

The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) du