2021

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_s

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar,

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or n

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/

A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.

The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context

SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page.

Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or H

Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The

Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless A

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could ca

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 all

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remo

CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticat

HashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting that required users withi

app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak t

Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and e

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows a

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in th

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in th

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.p

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the J

Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay netwo

An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Si

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaS

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action withou

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private fil

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privilege

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action wi

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv

The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated,

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthe

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catal

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catal

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000

A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local att

Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-

A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access

Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-

An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf