2021

An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer ove

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.

An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read.

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hint

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWr

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_buil

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plug

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to th

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack wh

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server pa

Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in

A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability ex

OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service (connectivity outage) via crafted

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may ma

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fix

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exis

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. T

IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when pr

An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions

If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All

GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska f

There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the ar

Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or e

Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or e

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file

Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people

IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as anot

A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review

A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vu

A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution throu

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through ma

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role as

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP

In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessi

Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could

This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker

This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an att

This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is poss

This affects all versions of package ps-visitor. If attacker-controlled user input is given to the kill function, it is

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring

a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow ed

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications

Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling sy