2021

This affects all versions of package immer.

This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an at

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (o

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of sym

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when renderin

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rend

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when renderi

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists wh

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vul

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firm

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged ac

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. Th

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lea

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a secur

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated end

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. Thes

Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious re

A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticate

A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by send

A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally auth

A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running

An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS all

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Juno

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causi

A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos

On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile app

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrat

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a vict

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certif

The Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway device is authorized to r

Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a

Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could po

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovere

A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAE

A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the co

An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() funct

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direc

Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability t

InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could resu

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier),

Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitra

Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arb

Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially