2021

Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR,

A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to

Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php.

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API (PHPCR) using a relational database to pe

Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected versions a reflecte

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there

Mercurius is a GraphQL adapter for Fastify. Any users from [email protected] to 8.11.1 are subjected to a denial of servi

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an attac

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow

IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bou

IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bou

IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checki

IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sens

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an

The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.h

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caus

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console wit

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow

CPAN 2.28 allows Signature Verification Bypass.

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while p

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEn

There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log

Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions sta

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions start

An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allo

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions start

An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.

A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.

A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 b

Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting f

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions start

Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions st

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions start

Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 1

In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all

Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting from

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions start

Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the conf

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions start