2021

Bot Framework SDK Remote Code Execution Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Web Media Extensions Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Windows Media Center Elevation of Privilege Vulnerability

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_L

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.

Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity.

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsin

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can b

mruby is vulnerable to NULL Pointer Dereference

OpenProject is a web-based project management software. OpenProject versions >= 12.0.0 are vulnerable to a SQL injection

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlMana

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are exe

Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. T

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize acces

Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast versions prior to 9.10 allow HTTP

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to

Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via S

SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for a

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided b

An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of sof

An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions

An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wa

The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privile

Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL se

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privil

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Lo