2021

Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a d

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause

A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TE

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B

In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients enter

In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B

Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03

Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and

Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File

Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized A

Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authentic

Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious use

Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated use

Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a

OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer ove

The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AU

Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, D

Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, D

Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-25

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Because The file

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining

CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel. In bl_categires_hel

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions failing

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elli

A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with craf

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via

In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Ser

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server ar

The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.

GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settin

SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing

Due to improper input validation in InfraBox, logs can be modified by an authenticated user.

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode U

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suf

Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arb

UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to se

Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the po

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the abili

IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is ret

The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unautho

A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to

A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local atta