2021

An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker wi

A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local ac

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad s

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhan

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when t

In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the li

In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for

Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This i

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing

IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed

Jenkins pom2config Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Jenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attac

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their dele

Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic re

Possible use after free due to improper memory validation when initializing new interface via Interface add command in S

Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing F

Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto,

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concur

Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-P

OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).

OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRP

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, the

Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove at

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insuffici

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WA

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Rel

A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a c

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Rel

A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a c

A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a c

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause

A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a c

A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a c

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a c

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted JPG file. Rel

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) vi