2022

The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabil

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system fil

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services

The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke t

The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may a

The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect conf

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vuln

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause thi

There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of thi

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display

The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Succ

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete

DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add A

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a va

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to imprope

VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with networ

VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with

VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with netwo

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks pote

Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential in

The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affec

The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerabil

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authentic

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker w

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC

Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their p

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their priv

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI pack

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attac

Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially expl

Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to ins

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a use

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacke

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit

Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap co

An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0.

A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter30

A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A

The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu