2022

Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC a

Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connecte

A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the us

A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content provi

A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user

Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connecte

A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with

An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read o

Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to r

Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress all

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vul

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions start

An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, an

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.

An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4,

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befor

Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befor

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 befor

An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions s

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordP

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code execu

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code execu

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code execu

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code execu

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code execu

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code execu

Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an atta

A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups'

In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stor

Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critica

A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an

A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some

A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some u

A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerabil

A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. This occurs in the admin porta

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv

Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can ca

In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds,

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plan

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and a