2021

Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PR

Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific condit

Monkshu is an enterprise application server for mobile apps (iOS and Android), responsive HTML 5 apps, and JSON API serv

Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code executio

Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leak

The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the ~/

The Poll Maker WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the mcount parameter found in the ~/

The SEO Backlinks WordPress plugin is vulnerable to Cross-Site Request Forgery via the loc_config function found in the

The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found

There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the l

Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in

The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vu

Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App:

Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App:

A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality o

A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of

A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionalit

common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash

crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest v

A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute

A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can le

The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the use

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString o

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers,

crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions

Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1

There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitat

There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may

There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenti

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenti

There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of t

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vul

There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may aff

There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead

There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m

There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful exploitation of this vuln

There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau

There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause

There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation w

There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of v

There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local att

There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may

There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may