2021

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communicatio

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physic

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin end

Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Use

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp u

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaint

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the de

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmw

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauth

It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative comma

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a mali

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore devi

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the d

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled,

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyo

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's manage

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authe

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default i

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vuln

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vuln

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can a

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in

IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc

iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer

SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting.

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.

Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal. An at

mruby is vulnerable to NULL Pointer Dereference

Microsoft SharePoint Elevation of Privilege Vulnerability

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the sec

vim is vulnerable to Use After Free

An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific upd

In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predic

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dum

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, t

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server. If exploited, t

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authentic

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote a

In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins