2021

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass th

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissio

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud

The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.

An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read

An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of

pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticat

Misskey is an open source, decentralized microblogging platform. In affected versions a Server-Side Request Forgery vuln

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upl

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal pa

better_errors is an open source replacement for the standard Rails error page with more information rich error pages. It

Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker o

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.

A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_

A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22.

A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup

A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22.

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function n

A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.

A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.

NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror all

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer

In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a he

In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer over

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download

A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthentic

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the

NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_se

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a h

In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflo

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive p

A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web inter

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softw

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softwa

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softw

A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Ope

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior t

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior t