2021

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specif

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. Th

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Mi

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing malic

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, t

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iO

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mali

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing ma

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs w

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an a

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catal

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1,

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 1

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadO

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, m

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be u

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path tr

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dns

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows LSA Spoofing Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acce

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corru

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriza

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple syst