2021

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Ga

Mermaid before 8.11.0 allows XSS when the antiscript feature is used.

app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data rel

An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a loca

NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to l

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessibl

Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP acc

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in

In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in Ser

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability e

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in enc

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the servic

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet wi

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP fr

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Serv

In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denia

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerabil

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victi

IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) could disclose sensitive information through an HTTP G

IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due

IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before and inc

Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an adm

PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an admini

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass t

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in mi

Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in m

ETINET BACKBOX E4.09 and H4.09 mismanages password access control. When a user uses the User ID of the process running B

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerabili

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerabil

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnera

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with

User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an a

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter

Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interfa

Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent

Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing

SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when e

Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 private files publicly accessible with Cloud