2021

Next.js is an open source website development framework to be used with the React library. In affected versions speciall

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588).

In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587).

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586).

In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589).

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585).

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585).

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t

Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is

Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it i

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::Confi

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the en

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a Com

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the e

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (dur

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing d

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption duri

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary f

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in whic

NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to co

NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauth

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complet

Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an in

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change in

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera r

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access control

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, wh

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the o

In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in PO

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and ga

In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user

In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by dire

In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in c

SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in Ser

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and ga

An arbitrary file deletion vulnerability exists within Maccms10.

A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arb

An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix wh

In SapphireIMS 4097_1, the password in the database is stored in Base64 format.

In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Di

In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installe

In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after misha