2021

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained acc

Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience,

Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqi

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacke

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this

The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with netw

The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A m

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A mali

The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attac

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastr

The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance manag

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API.

vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious act

The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to

The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor

The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor wit

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A maliciou

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vC

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data org

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE S

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family W

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could all

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker t

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary com

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitr

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileg

A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, loca

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IO

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software c

A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Softwa

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote a

A vulnerability in the Protection Against Distributed Denial of Service Attacks feature of Cisco IOS XE Software could a

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Ro

A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remot

A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an u

A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadba

A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Ro

A vulnerability in the Layer 2 punt code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to c

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Softwa

A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow

A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Ci