2021

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron App

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron App

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affe

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are af

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported v

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte

Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported ver

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affect

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported ver

FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made befo

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacke

Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the q

IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.

Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using `puma` with a proxy which

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attack

HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID

A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1

Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device inform

A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrar

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial o

An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and bel

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions startin

In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client appli

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker En

Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in o

In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s passwor

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonat

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's

The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different

An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) a

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) a

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988)

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP