2021

Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vuln

A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1

A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1

Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem ve

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the

In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BI

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIN

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external con

A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an una

An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an auth

Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting rando

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retriev

Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import end

In Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denia

A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1

A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to

xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvari

A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8

A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. A

A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s)

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5

AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to ca

SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary c

There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 an

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs suffic

There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers

Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x b

Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH

Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source d

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before ver

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before ver

Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful

Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files ins

HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin.

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privil

Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users gr

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an a

CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arb

CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbi

The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The curren

Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that thi

Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: Th