2022

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted appli

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted appli

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted appli

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted appli

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted appli

A vulnerability was found in SourceCodester Sanitization Management System. It has been classified as problematic. Affec

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. T

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects a

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic.

A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` c

Microsoft Office Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This iss

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P

A vulnerability was found in Crealogix EBICS 7.0. It has been rated as problematic. Affected by this issue is some unkno

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affect

Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attacker

Intent redirection vulnerability in Samsung Account prior to version 13.5.01.3 allows attackers to access content provid

Improper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read

Improper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of co

CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `tru

Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPres

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unaut

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was disco

The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwa

A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an un

Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0

A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk i

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress.

Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded w

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in Themes Awesome History Timeline plugin <= 1.0

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <=

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when l

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prio

User input included in error response, which could be used in a phishing attack.

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.

Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A perso