2021

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability a

An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability al

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cau

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may al

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabili

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vu

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verific

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vu

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabi

In Artica Pandora FMS <=754 in the File Manager component, there is sensitive information exposed on the client side whi

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software rec

There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affe

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may l

There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vu

Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attac

A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers

A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permis

Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to J

Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XX

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, a

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserializati

Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via G

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulne

There is a Defects Introduced in the Design Process Vulnerability in Huawei Smartphone. Successful exploitation of this

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabi

There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone. Successful exploitation

There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may es

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djv

There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Successful exploitation o

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnera

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may a

There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affec

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabili

A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this

IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configura

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and

Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information (remote).

Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote aut

An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerabilit

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in conne

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length co

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which m

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or esc

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on t

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of

Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metad