2021

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP)

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the e

A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, th

The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversar

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improp

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not

In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In som

In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some

In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision

A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_el

In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. I

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty META

An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in T

An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large

This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them befo

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled re

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated us

Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the syst

IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it u

IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techni

IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they s

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation

IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive i

A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could

Draeger X-Dock Firmware before 03.00.13 has Active Debug Code on a debug port, leading to remote code execution by an au

Draeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code execution by an authenticated

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, a

homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware ima

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products u

mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified ve

Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4

HedgeDoc is a platform to write and share markdown. HedgeDoc before version 1.8.2 is vulnerable to a cross-site scriptin

An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able t

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacke

BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-p

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19

Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the

Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the

Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow. Stack-based buffer overflow occurs when Rocket

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by

In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer we

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s

TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not co

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Secu