2021

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of ser

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to rea

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attack

A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not c

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a mal

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the netw

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to impro

IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an a

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Serv

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18.

This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platf

Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability wh

A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSli

An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0

In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the d

An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A spe

A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafte

In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the d

A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8

An out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A spe

An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malformed

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially c

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially c

A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially c

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lea

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sendin

An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram.

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 per

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 per

An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 pe

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC)

An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hard

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the devi

An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOT

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allow

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due t

In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app

In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead

In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent.

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default

In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that

In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure defaul

In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This coul