2021

The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run c

When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have r

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a maliciou

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulner

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users

The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the lengt

Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.1

Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 thro

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 thr

A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate priv

An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the

An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint v

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allow

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.1

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to s

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead

There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabilit

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to t

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to a

There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of th

There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN

There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause add

There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerab

There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affec

There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may al

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthentic

An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an u

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retri

A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.

An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote att

Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management i

An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerabili

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacke

An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload

Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allo

The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence wh

KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.

KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.

Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines cou