2021

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthS

In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentica

IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary cod

IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to impersonate

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1(

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address o

The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTM

Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javasc

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations,

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver la

In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver

A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management

A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platfo

A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to

Zoho ManageEngine ADManager Plus before 7066 allows XSS.

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describi

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movabl

Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7

Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Typ

The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use

Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to interce

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel pa

Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to devic

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of servi

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically prox

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which co

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given

Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, give

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted

Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted app

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java