2021

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS u

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper va

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plu

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (version

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path.

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth

The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the con

Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE for

Possible heap overflow due to improper validation of local variable while storing current task information locally in Sn

Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Sna

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon A

Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con

Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, S

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for inp

Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdrag

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in

A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with pai

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdrago

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, S

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon

Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snap

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdrago

Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Aut

Possible memory corruption due to improper check when application loader object is explicitly destructed while applicati

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compu

Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacke

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacke

A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information t

A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, r

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-pri

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access

A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) fe

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-pri

A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to over

A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only

ZStack is open source IaaS(infrastructure as a service) software. In ZStack before versions 3.10.12 and 4.1.6 there is a

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti

Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary

systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation be

scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webaut

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and