2022

An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitr

SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scriptin

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect use

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does n

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbit

A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywh

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - v

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by explo

When a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in SAP 3D Visual Enterpri

When a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources in SAP 3D Visual Enter

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the sa

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbi

An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary

When a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from untrusted sources in SAP 3D V

When a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterpr

When a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted sources in SAP 3D Visual

When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution

Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a c

The affected product is vulnerable to an out-of-bounds read, which may result in code execution

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arr

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnera

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary co

The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.

The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information.

The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing th

A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.

In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could l

In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of pr

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. T

In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground

In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This coul

In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persi

In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remot

In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass.

In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escala

In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead t

In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation.

In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. Th

In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the co

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmf