2021

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable h

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in c

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property int

CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > M

A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows at

A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Re

A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Re

Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript,

Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configurat

A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows atta

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attac

Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting

A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attacke

Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a st

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted us

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as a

ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconn

Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' paramet

Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in th

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitra

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Op

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can rebo

Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fiel

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in ve

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in ve

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): A

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service.

A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vuln

It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON f

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): A

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) pr

Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLin

Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLin

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected inst

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210