2021

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_

A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges us

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any contr

In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they g

UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may ca

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not

A specially crafted document can cause the document parser to copy data from a particular record type into a static-size

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installat

A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use

A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could caus

The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path

Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files.

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing a

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can b

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in

All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geoj

A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an a

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve

Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) a

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certai

Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap

Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to poten

Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to per

Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticat

OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and

An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers t

Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows at

Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdr

Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Com

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati

Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati

Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parame

Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Com