2021

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow

An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not expose

An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to

mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary o

NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when succes

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attac

This issue was addressed with improved entitlements. This issue is fixed in watchOS 6, tvOS 13, macOS Catalina 10.15, iO

CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic issue was addressed

Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations.

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows U

Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote atta

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remo

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assig

When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decodin

An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.

An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.

A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an a

An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security b

A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Modu

A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0

A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWa

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWa

A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8

An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix Premie

A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierW

An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 20

An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave

An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix Prem

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenti

Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authentica

A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can mak

A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can mak

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix Premi

Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.

Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/appl

lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksetting

An issue was discovered in Quest KACE Desktop Authority before 11.2. This vulnerability allows attackers to execute remo

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute comman