2022

NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a loca

NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a

NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, whi

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular use

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not vali

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not vali

NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds re

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can ca

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged reg

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd.

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed.

A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is a

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.9

In some non-default installations of Esri Portal for ArcGIS versions 10.9.1 and below, a directory traversal issue may a

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testi

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access

Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watc

There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may all

Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/me

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing i

DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for inv

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of servic

Dragonfly is a Java runtime dependency management library. Dragonfly v0.3.0-SNAPSHOT does not configure DocumentBuilderF

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testi

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

The dag-pb codec can panic when decoding invalid blocks.

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a pot

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed,

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to re

Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious ser