2021

Roomer is a discord bot cog (extension) which provides automatic voice channel generation as well as private voice and t

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a spe

A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application se

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all

Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by i

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouvea

An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `Op

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a de

A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allo

A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using A

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scri

The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote atta

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows un

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows

Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to i

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows

Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbitr

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attac

A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handl

A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Function

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access netwo

Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when rea

A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length g

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the

A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This

A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacker

A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it

Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server whe

Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is

When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, Catia

Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into

Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. A

There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E

There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sen

There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC

There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insuffici

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot env

An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response heade

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denia

Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log co

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by l

InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocate