2021

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is

The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference)

Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or

The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereferen

The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) v

The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer pro

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.

All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.

An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers t

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administra

Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop

A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks P

An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated

An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated a

MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to a

JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a te

Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the d

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, v

Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power t

Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on th

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power

IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force

IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in fu

IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier fo

The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptogr

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow a

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the applicatio

This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be

Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may al

Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.1

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.

Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a

Improper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may allow an authenticated use

Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user t

Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allo

Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before

Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapt

Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before vers

Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters befo

Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before vers

Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapter

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyo

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address b

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafte

Certain NETGEAR devices are affected by privilege escalation. This affects D8500 before 1.0.3.44, R6400v2 before 1.0.2.6

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 bef