2021

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Frameworks). The

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation). The supporte

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). The supported

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Lo

An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS

The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds read vulnerability

In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to stream

The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, fro

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Serv

Windows NTFS Denial of Service Vulnerability

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session managem

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in pla

IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory

Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malic

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local applicatio

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catal

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This is

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when

django-registration is a user registration package for Django. The django-registration package provides tools for implem

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps director

The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before vers

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrator

UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100

Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is exe

Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass t

Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physical

Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to

An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to

A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests i

When a user opens manipulated Autodesk 3D Studio for MS-DOS (.3DS) files received from untrusted sources in SAP 3D Visua

When a user opens manipulated Portable Document Format (.PDF) files received from untrusted sources in SAP 3D Visual Ent