2021

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Comput

Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is f

Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Sna

Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Sn

Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,

A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapd

Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Au

RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to captu

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before access

Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of servic

When sending a socket event message to a user application, invalid information will be passed if socket is freed by othe

Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.

An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several

The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validati

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) i

OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative action

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server `strelaysrv

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may ha

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of

Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulner

Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerabil

Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulne

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."

SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to ob

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent).

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal

An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS servic

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter th

The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As o

Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, ED

Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username.

The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due

Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprot

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in

The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than

When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send

The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it ha

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an admini

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an admini

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing ma

Due to the lack of sanitization and lack of nonce protection on the custom CSS feature, an attacker could craft a reques

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported fi

The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full