2021

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allo

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive inf

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthori

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to t

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerabi

It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 a

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secome

Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has

Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privi

Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to discl

It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on i

The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In

PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of ano

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerabi

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properl

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a re

Azure RTOS Information Disclosure Vulnerability

Azure RTOS Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Azure RTOS Information Disclosure Vulnerability

UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, wh

Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is un

An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting

In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visitin

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may al

Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a proje

A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple Jupyt

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of i

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows atta

An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5

An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the custo

The issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS 15. An attacker with p

There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race

A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attac

A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to c

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerabili

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerabili

The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tel

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud OfficeOnline application prior to version

Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 a