2021

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' paramete

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access ri

Command Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function.

Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before

Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap

Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the a

LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling.

Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-App

In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request

An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interf

A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface enab

An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enab

A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an authentica

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enable

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-b

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which

An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app v

Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerability when chained w

Adobe Media Encoder version 15.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a special

Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during install

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Au

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows att

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A s

A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer runni

A local user may be able to cause unexpected system termination or read kernel memory. This issue is fixed in macOS Big

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A non-privileged user may be a

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Secur

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6,

A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An applica

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Updat

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catal

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14

Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 M

A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Upda