2021

Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupti

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupti

Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap co

Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit

Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit

Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user

When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise View

When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Vis

When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visua

When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Vis

When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer versi

When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual E

When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Visu

When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D V

SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in

SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does n

The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform

SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment).

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may le

A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to

A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbeh

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.

A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenti

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user co

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functio

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malic

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage se

Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things

RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF user

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges

Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a de

An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is n

This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the ser

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileg

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload fea

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstra

Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute maliciou

Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number o