2023

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Pre

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without u

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardem

Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to g

Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Re

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE a

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attacke

Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary c

An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container rem

Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vert

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary

External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in Yuga

The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerabil

The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability m

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect

The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability m

The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of

The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to

The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may af

The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentia

The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect

The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may af

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this v

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this v

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data in

The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerab

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a spe

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is p

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user.

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Impr

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown proces

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29

Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restriction

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could all

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attack

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-r

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring an

thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to e

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated us

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged

Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression de

formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parse

Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template funct

Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tina