2022

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted C

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file

A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affect

In affected versions of Octopus Server it was identified that when a sensitive value is a substring of another value, se

HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid

mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.

GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header.

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program whic

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method which lacks proper diffusio

SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430, allows an authenticated atta

Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file receiv

Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTrans

Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.d

Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (.igs, .iges, CoreCadTra

Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf, emf.x3d) file received

Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material (.rhm, rh.x3d) file r

Due to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf, TeighaTranslator.exe) file recei

Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) fil

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An addit

Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing (.sldasm, CoreCadTranslator.

SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated at

Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be rest

The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed

Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System)

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immedi

VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges m

Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versi

Cross-Site Request Forgery (CSRF) vulnerability in Shortcodes Ultimate plugin <= 5.12.0 at WordPress leading to plugin p

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android

In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource e

In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to

In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. T

In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo

In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to

In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when anothe

In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows upload

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter a

Windows Security Support Provider Interface Information Disclosure Vulnerability

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Windows USB Serial Driver Information Disclosure Vulnerability

Windows DHCP Client Information Disclosure Vulnerability

Windows Distributed File System (DFS) Information Disclosure Vulnerability