2021

A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The CsrfProtectionMiddleware component allows method ove

An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allow

An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote at

reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw

Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast disc

An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allow

TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, all

A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an atta

An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific dep

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reol

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink serv

openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection vi

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexCon

Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows re

Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. A

FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, whi

In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w

ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deser

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the

Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants

HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before versio

IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ dat

Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrat

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vul

Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdra

A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdrago

Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it a

Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdr

Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data receiv

Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer receiv

Out of bound access in computer vision control due to improper validation of command length before processing it in Snap

Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race conditio

Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon A

Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extens

Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, S

Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vul

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authen

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authen