2021

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon

Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxu

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause in

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 an

Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser F

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 an

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSES

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of

Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that co

Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote

Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could l

Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a rem

Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have

In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or ke

In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host o

In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and t

In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configu

In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the

In Versa Director, the un-authentication request found.

In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not change

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through in

redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allo

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an a

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /

COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the "Admin name" parameter.

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection

IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of

IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additio

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, whi

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This c

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop)

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of servi

The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Che

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c

Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting

An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a privat

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vuln

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set ex

A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw