2021

Cyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/ft.php?u=[XSS] attacks.

Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed ev

Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed ev

Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory

After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be disp

A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note:

A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash

Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered du

Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause

Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the poten

An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potenti

A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767.

A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specia

A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSli

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situatio

An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTT

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that t

Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_

Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker

An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry®

In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This cou

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local

In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permis

In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers

In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could

In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to t

In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receive

In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast

In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This co

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat

In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This co

A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection

Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.

An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline com

In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session betw

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a spec

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device