2021

An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authe

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unaut

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to

A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials thro

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles

A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network pack

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, le

It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Appl

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made i

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail componen

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management componen

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in S

Nextcloud Server is a Nextcloud package that handles data storage. In versions of Nextcloud Server prior to 10.0.11, 20.

Nextcloud Server is a Nextcloud package that handles data storage. A vulnerability in federated share exists in versions

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker

Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10,

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which c

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0

An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x,

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavut

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filt

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function

A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function i

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.

A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malici

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might l

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might l

Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because th

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including B

An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-

A cross-site scripting (XSS) vulnerability was discovered in the Administrator panel on the 'Setting News' module on CMS

A stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attac

A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute

A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authe

A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a