2021

Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Task

In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through con

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external

Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 d

A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 device

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length o

A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 device

Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero w

In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMe

In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local esc

In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds che

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lea

In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lea

In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to

In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead

In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permissio

In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe Pendi

In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a s

In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bound

In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validat

In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to a

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing

In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to l

In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to r

SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sys

A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permissio

Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post tit

A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.

FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /page

An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.

Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows rem

Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Ser

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read a

Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI version