2021

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restrict

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restricti

Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restricti

Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might

Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerabilit

Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypa

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operati

A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Man

A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This is

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This is

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a fo

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_fil

Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that ca

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers wi

There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform s

PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a malicious attacker can achieve Remote

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the default configuration of client side

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the

There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request t

There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O r

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict ope

Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtim

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enter

Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters in post/addComment.

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename paramet

A memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially craft

IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to exe

IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure fi

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' p

Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of

Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attac

Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This

FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attack

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attac

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto