2022

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a

An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemo

An XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to co

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2.

PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology tha

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued

A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for t

The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user i

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerabil

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is s

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.

A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerI

AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which

In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to

In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validat

In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This cou

In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denia

In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could le

vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this iss

An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4

In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to rem

In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead t

In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check

In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds ch

Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A

In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of

In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation

In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of priv

In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation. This could lead to local esc

In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation.

In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation.

In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation. Thi

In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This

In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local es

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local es

In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local esca

Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A

In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This co

In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This c

In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing per

In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input vali

In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. Thi

In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to loc

In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of priv

In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of priv