2021

Windows Event Tracing Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Windows AppX Deployment Server Denial of Service Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

Windows Application Compatibility Cache Denial of Service Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Azure AD Web Sign-in Security Feature Bypass Vulnerability

Windows Media Photo Codec Information Disclosure Vulnerability

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

Windows Overlay Filter Information Disclosure Vulnerability

Windows Installer Spoofing Vulnerability

All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CS

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allo

SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authe

An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work

SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicio

SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed ma

SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read som

SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suffi

An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Applicatio

Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensiti

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead t

In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation

In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local

In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could

In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing

In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of

An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh() functionality of Slic3r libslic3

An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input dat

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perfo

An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could al

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "/

Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.

htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Cont

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-repo

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacke

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for ope

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for ope