2021

The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.d

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.

playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_con

merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploite

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploite

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulne

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP

check-spelling is a github action which provides CI spell checking. In affected versions and for a repository with the [

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to v

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains s

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login ser

An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items

The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1.3. This allowed unauthenticate

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper va

The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the con

Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE for

Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snap

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compu

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti

scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webaut

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' paramete

Command Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function.

Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary

A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer runni

Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 20

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3,

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catali

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, w

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Sec

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An applica

A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Secur

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Com

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Sn

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapd

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdr

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosur

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packe

BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.

Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user pro

eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveR

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissio