2021

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Co

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a spe

In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE

A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application se

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default pas

The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited pr

Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by i

An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote attacker to execute arbitrary

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouvea

An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `Op

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can oc

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a

An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. Thi

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buf

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a de

A flaw was found in keycloak in versions before 13.0.0. A Self Stored XSS attack vector escalating to a complete account

A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allo

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validat

A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using A

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scri

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet proces

The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote atta

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows un

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows

Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to i

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows

Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbitr

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote a

The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, su

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attac

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, suc

A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handl

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for co

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnera

A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /

A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplyin

A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Function

An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access netwo

Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged

A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection us

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory c

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which migh

A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might le

A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to m