2021

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to

SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and p

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT

Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information

In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of p

In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privile

In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of p

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information d

In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local i

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text for

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the pass

A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.

A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a deni

Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and

A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unau

In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Int

A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting (XSS) vulnerability in Wechat.php.

In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to exec

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=r

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to us

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authenticatio

Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distribu

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operati

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a ma

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration informat

In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting