2021

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based B

Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buff

An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on NetWave System 1.0 which a

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.

CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.

Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by t

An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to qua

An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can b

Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in

Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerabi

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information d

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authe

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the Auth

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful b

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a r

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly disco

The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expressi

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermedi

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web se

IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by se

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi

IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID

IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By s

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements

Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification o

Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escal

Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated u

Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privil

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Dow

Privilege escalation vulnerability in QND Advance/Premium/Standard Ver.11.0.4i and earlier allows an attacker who can lo

A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EP

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/li

Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors i

PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged

Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserial

A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execu

An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interfa

A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If a

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memor

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job S

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An a

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology Dis