2021

A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c

A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter function.

A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 S

There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVisi

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at

Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for

CMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in {webroot}/uno/central.php fi

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations.

Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the rende

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised th

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.

Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view a

The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of f

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the serv

An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP

Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE.

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid par

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid par

An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.

An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserializat

ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha.

An issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages.

In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharac

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execu

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execut

Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenti

A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP ad

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploit

Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be

Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be

WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.

Hygeia is an application for collecting and processing personal and case data in connection with communicable diseases.

IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPN

The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an at