2021

Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A

IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack whe

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access

A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows at

A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows atta

A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attacke

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted us

ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconn

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Op

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can rebo

Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fiel

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service.

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected inst

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-4

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-4

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R640

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.2312

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): A

A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in versi

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the M

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administr

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packe

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded a

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) conta

The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending

BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability.

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_c

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4,

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4,

Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, N

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 1