2021

In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosur

In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege

In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local

In memory management driver, there is a possible side channel information disclosure. This could lead to local informati

In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local de

In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to lo

In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local de

In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead t

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.

A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through spe

The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token

The third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an authenticated user to obtain

Datalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see query results not cons

ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the pu

e7d Speed Test (aka speedtest) 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET

Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This ca

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalatio

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter s

A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attac

Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which al

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name

An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by fo

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent suppli

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplie

An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authen

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authenticatio

Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits

Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitab

An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted

A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub

OpenSIS Community Edition version 8.0 is affected by a cross-site scripting (XSS) vulnerability in the TakeAttendance.ph

A SQL injection vulnerability exists in the Take Attendance functionality of OS4Ed's OpenSIS 8.0. allows an attacker to

Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload w

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. Th

In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover cred

In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the sys

An issue was discovered in Concrete CMS through 8.5.5. Arbitrary File deletion can occur via PHAR deserialization in is_

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversatio

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code ex

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP In

Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensi