2021

SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an una

An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Repo

utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p9

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate priv

An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the

An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint v

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allow

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.1

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to s

There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead

There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabilit

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to t

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to a

There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of th

There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN

There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause add

There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerab

There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m

There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to

There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affec

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allo

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privi

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows

Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID

Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Acco

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to a

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.

An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC i

An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary

An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attack

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSI

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive inf

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthori

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain act

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitra

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execu

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.

A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below al

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and b

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may al