2021

When a user opens manipulated Windows Bitmap (.BMP) files received from untrusted sources in SAP 3D Visual Enterprise Vi

When a user opens manipulated Graphics Interchange Format (.GIF) files received from untrusted sources in SAP 3D Visual

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ versio

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the n

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service

All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOr

Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient ver

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read a

Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bou

A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the

When a user opens manipulated PhotoShop Document (.PSD) format files received from untrusted sources in SAP 3D Visual En

When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untrusted sources in SAP 3D

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storag

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which co

Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows u

Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance informati

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts informat

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance informati

The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive informat

An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS

A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerabili

The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be r

IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially cr

matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for ope

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vu

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information dis

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a

The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a requ

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can u

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-priva

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a bac

ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted ca

OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both S

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated adminis

IBM Security Verify Information Queue 1.0.6 and 1.0.7 uses weaker than expected cryptographic algorithms that could allo

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input v

Acrobat Pro DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earl

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e

Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerab

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions s

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when