2021

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdrago

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user inp

SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the componen

File Deletion vulnerability in Halo 0.4.3 via delBackup.

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.

SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote,

Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow

Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement. The need to use 2FA for authentication in enforc

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Man

The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the p

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on pr

golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporar

Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers t

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary c

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary c

A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9.

An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, thi

An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Unauthenticated API Endpoints.

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded Web Application Adm

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords th

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowin

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers ca

The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain admi

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inj

The QSAN SANOS setting page does not filter special parameters. Remote attackers can use this vulnerability to inject an

OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands w

OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arb

Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary command

The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control int

Command injection vulnerability in QSAN Storage Manager allows remote privileged users to execute arbitrary commands. Su

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remo

Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows re

QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attac

QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated atta

Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the

Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via

Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an

A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress Word