2022

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affe

Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affe

Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrar

Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An au

Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticat

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authen

A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to t

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Re

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that e

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that e

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by mo

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients setti

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposin

Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that coul

Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resultin

Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to

Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could resu

Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register

Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an i

A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU c

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing

An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider r

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use t

IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting.

Due to insufficient input validation, SAP Employee Self Service allows an authenticated attacker with user privileges to

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data

Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encod

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a den

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a den

It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions fro

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting fro

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9

Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 pri

Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.