2021

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial I

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to acce

A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Fa

A vulnerability in the ROM Monitor (ROMMON) of Cisco IOS XE Software for Cisco Catalyst IE3200, IE3300, and IE3400 Rugge

A vulnerability in the Easy Virtual Switching System (VSS) feature of Cisco IOS XE Software for Cisco Catalyst 4500 Seri

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execut

A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Ci

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrar

A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an au

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integr

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow a

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthe

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arb

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker t

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbit

A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker t

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduc

A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 pr

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 R

A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, loca

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escal

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticate

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remo

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to acce

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitr

A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could al

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.

An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticat

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables whi

Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbou

An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack t

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demote

In MaEPSBroker 2.5.0.31 and prior, a command injection vulnerability caused by improper input validation checks when par

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversa

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Re

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By

ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title para

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as ship

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-me

A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.s

IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remo

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malic