2021

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of

A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user pe

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user

A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where i

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticate

The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.

An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an

The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion vi

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL po

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_dige

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with special

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before us

lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It

Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to

Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticate

Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may

Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before v

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjace

Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user

Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated us

Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.

Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17

Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authentica

Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2

Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated use

Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to

Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentiall

Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable informati

Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user t

Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an

Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 ma

Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potent

 Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enabl

Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may all

Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an

Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may a

Insecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an

Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable

Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenti

Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_

Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enab

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of pr

Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before v

Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2

Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before versi