2021

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-4

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-4

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Sec

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R640

MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user ac

Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLin

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.2312

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.2312

The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restr

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): A

A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in versi

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the sub

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the M

In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 1

In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 1

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directo

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipu

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.03

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administr

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to a

An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packe

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded a

A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) conta

The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending

Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.

bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related

BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability.

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_c

An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows att

An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale G

wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4,

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4,

Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, N

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying

OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `-

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 1

In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 1

In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 1