2021

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions incl

In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root term

In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can b

In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of th

FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code

The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox wo

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted C

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versio

Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerabl

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inje

In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, liste

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-

The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platfor

In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-

Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML v

Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an applicatio

CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data s

GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is relate

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory

There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execut

D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp

Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via uns

Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecifie

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecifie

Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via unsp

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Comput

Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is f

Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Sna

Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Sn

Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,

A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapd

Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Au

RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to captu

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before access

Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of servic

When sending a socket event message to a user application, invalid information will be passed if socket is freed by othe

Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in tu