2021

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is

Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is exe

Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass t

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action withou

Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private fil

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privilege

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physical

Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action wi

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially cr

Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a special

Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3.

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to a

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including versio

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and includi

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including versio

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and inclu

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 poten

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv

The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands w

ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacke

The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF)

Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is

APKLeaks is an open-source project for scanning APK file for URIs, endpoints & secrets. APKLeaks prior to v2.0.3 allows

Mifos-Mobile Android Application for MifosX is an Android Application built on top of the MifosX Self-Service platform.

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated,

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms coul

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms coul

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms coul

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthe

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catal

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catal

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE W

A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local att

Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauth

A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access

Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-

An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms coul

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms coul