2021

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript

When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0,

LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID.

The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a

OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline elem

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syn

Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resour

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassP

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter

OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passw

PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of

PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of

IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, c

IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could al

IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or ses

Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue.

A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between

Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in v

Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset

Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon

Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and mea

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnorm

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status

Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensiti

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive inf

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated,

Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticat

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a

A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthentica

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a

A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could a

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allo

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a

A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authentic

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem