2022

The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to

'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->v

A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233

In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity,

In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input va

In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing

In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could

In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informatio

In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. Th

In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a m

In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This co

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call withou

In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead

In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation

In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lea

In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's

In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic err

There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn cont

android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.

In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. Th

Spryker Commerce OS 1.4.2 allows Remote Command Execution.

A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability

A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is so

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unkno

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J

Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulne

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-F

WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR.

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to

The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation fun

This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before bei

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than t

Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability