2021

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpe

SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receiv

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affect

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "me

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AE

In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 1

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase v

The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operatio

The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit boun

The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller th

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion of many fake records r

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because th

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because re

OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability.

OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability.

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows

There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vu

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege

dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly c

There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this v

There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabili

There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of t

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may

There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impai

The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability i

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access v

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain se

When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the

Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window t

HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (speci

MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change request

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vuln

A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, t

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused b

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A

A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copi

The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injec

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind

The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly hand

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to de

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance wa

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions

An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacke

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the funct