2021

An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the proc

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize the window of a runnin

Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TL

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such

IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive

SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the `filesystem.

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains

Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending

The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from th

Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execu

The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to

The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing

LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm.

LivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm.

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthori

Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to delive

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment term

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidat

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authentic

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inj

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated a

Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snap

Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdr

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdrago

Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Aut

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon A

Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon In

A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Aut

Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapd

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, S

Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer l

Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdrago

Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, S

Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in S

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the me

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdra

Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon

Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null poi

Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of servi

Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid

Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify i

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javasc

The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to rea

A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissa