2021

A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker

A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC

A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption a

A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEnc

In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access t

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parse

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() insid

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser F

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 an

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of

Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that co

Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have

In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the

In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not change

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through in

redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allo

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, whi

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This c

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop)

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c

An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a privat

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vuln

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set ex

A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse th

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the A

A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt

A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading t

A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An at

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and

A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which mig

A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lea

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to

A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are c

A memory leak vulnerability was found in Linux kernel in llcp_sock_connect

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.

FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Deni

A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trig

Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attack

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE