2021

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol D

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configur

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversa

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. A

Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 2

IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous f

IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redire

IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on th

IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed t

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacke

IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user.

IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. IBM X-For

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed t

IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further atta

IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker

IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validat

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfi

A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remot

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms t

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characte

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users o

Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticate

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery

IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a

Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET

DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678.

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder per

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service

The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whe

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.

MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors.

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC

iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a v