2022

Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compr

There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions w

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Eleme

An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes.

Dell EMC PowerStore, contain(s) an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker t

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/vi

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/vi

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service vi

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColo

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Fil

IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via v

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via vie

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 t

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi E

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENE

The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on end

The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an att

Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials.

An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX

An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an

A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Ju

A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network

A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience (appqoe) sub

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface

Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthentic

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown pro

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unk

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown par

A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escal

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verifica

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer ove

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because

A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size

Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An un

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that a

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supporte

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

Vulnerability in the Oracle Crystal Ball product of Oracle Construction and Engineering (component: Installation). Suppo

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Search). Supported version