2022

The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploi

The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect th

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affe

The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of t

The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitatio

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall An

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wl

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attack

A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with netw

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with netwo

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network

Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a p

Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic

Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a pan

Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack

Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working d

XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's process

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and G

Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a pan

A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through

In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escal

In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service

In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This co

In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction byp

In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass du

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. Th

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race

Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulner

The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of thi

The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidential

In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mallo

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec

Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user co

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious

IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system t

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisc

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified T

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated rem

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V1

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WI

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104

Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle