2021

A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as

A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in App

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow

A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Ap

A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could all

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat

Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.

Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu.

An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a

BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This c

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This c

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This c

A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions ex

Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry

Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation

Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in

Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a repo

Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL m

Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a

Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if imperso

Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client appl

An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODE

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow

nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, vi

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions the

Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'che

Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the c

Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive informa

Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/P

The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (a

Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to

An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticate

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remot