2021

A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapT

A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local at

Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send

The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacke

Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discov

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affec

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. ano

There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input whe

There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it

There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protect

Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disa

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented i

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthoriz

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthoriz

In JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for any other users.

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the

GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted ke

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server si

ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not v

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact suppo

A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forw

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2,

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ver

There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some

The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existen

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process

GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database.

Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains poten

IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to imperson