2021

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafte

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to do

IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an at

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious

IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function.

MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI

decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to

flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correc

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum

The breed function in the smart contract implementation for Farm in Seal Finance (Seal), an Ethereum token, lacks access

The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has cer

In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processi

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- exten