2021

In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation

In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation

In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi

In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of pri

In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of ser

Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process run

ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-com

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adja

A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary f

Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privilege

In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS).

In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path.

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path v

HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users.

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote ho

The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker i

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access

An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp

IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of A

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they sh

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Di

A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote att

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device canno

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation

HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid

HashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requ

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP req

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP req

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP req

openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter.

A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while

CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin (@ck

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerabilit

The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerabi

The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, w

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerabili

The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerabilit

This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays.

An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 1

An issue was discovered in MantisBT before 2.24.4. Due to insufficient access-level checks, any logged-in user allowed t

An issue was discovered in MantisBT before 2.24.4. A missing access check in bug_actiongroup.php allows an attacker (wit