2021

A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the adm

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sendi

The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was fo

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constan

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive devic

Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform

A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf

In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lea

In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This

In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local esc

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast

In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could le

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connecti

In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony setting

In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loca

In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. Thi

In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could l

In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow

In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of

In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, withou

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to

In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingInt

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state n

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that th

Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument pass

In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the r

In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a

An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privil

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative priv

Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to r

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands w

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can

An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensi

The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository th

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A spec

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to in

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique S

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath optio

In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to t

Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sens

Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap cor

Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit hea

Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potenti

Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navi

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote at

Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perfor