2021

This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require

A command injection issue in dji_sys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allows for code

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi Connec

Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlin

The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.

The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.

BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a co

VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-d

GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent.

OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through

Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow D

core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCAD

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCAD

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCAD

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCAD

A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A spec

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012e

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads t

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtai

The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtai

Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authent

Improper access control for Intel(R) Graphics Drivers before version 15.45.33.5164 and 27.20.100.8280 may allow an authe

A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitr

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit

Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticat

Improper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370 may allow unauthenticat

Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticat

Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33

Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially enab

Uncontrolled search path in the Intel(R) Optane(TM) DC Persistent Memory installer for Windows* before version 1.00.00.3

Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.5

Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to

Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user

Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before versio

Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules be

Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potent

Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentia

Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentia

Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged use

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and befo

Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may

Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.3

Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authent

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrar

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to dow

FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary