2021

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Admi

There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dns

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared l

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code informatio

The MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to gain system access due t

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking att

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to impr

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system info

IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information discl

The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) us

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) regis

The remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat Server before 2021-07-30

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduc

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_AD

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls io

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (

" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.

Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in table_population.php.

An open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to spoofing. To exploit the vuln

Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded

Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper i

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input r

Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the d

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the

Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of s

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered

TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions

Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during parsing of a Range header. NOTE: T

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content.

TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` impleme

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooli

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of divisi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that u

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a de

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a de

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from ou