2021

A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio

A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_co

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferre

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user creden

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to informati

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker w

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff A

An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM

Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a co

A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vu

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause le

Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability

evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes r

An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal int

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands int

Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' vi

Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitrar

Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/k

Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/k

A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could le

An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman c

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the a

A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions <

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the h

Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Sha

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments eve

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fra

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept se

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept pl

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implement

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented fram

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementat

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even th

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Security Feature Bypass Vulnerability

Windows SMB Client Security Feature Bypass Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Desktop Bridge Denial of Service Vulnerability

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Windows CSC Service Information Disclosure Vulnerability