2021

In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchroniz

In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. f

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code e

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent sch

An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/rest

A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54,

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communicat

Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.x

Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrat

The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users wi

The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to

ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version

trestle-auth is an authentication plugin for the Trestle admin framework. A vulnerability in trestle-auth versions 0.4.0

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions

In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Azure DevOps Server Spoofing Vulnerability

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Outlook Memory Corruption Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft SharePoint Denial of Service Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Portmapping Information Disclosure Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Console Driver Denial of Service Vulnerability

Windows TCP/IP Information Disclosure Vulnerability