2021

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Servic

A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, thi

The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A mali

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions

Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulne

Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the applicat

Out-of-bounds Read in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with

Divide-by-zero bug in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with

Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the applicat

Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the applicat

A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted s

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this c

GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.

A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HT

Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters

Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.

Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url paramete

Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML par

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusi

phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of

SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippet

Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file h

Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH pass

VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App

VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A mal

Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno

Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Man

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Secu

Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-2542

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite N

Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a re

Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deser

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not exp

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an i

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an i

Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol

pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on a

ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based o

Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl

There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SP

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and